last executing test programs: 41.908053715s ago: executing program 2 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x3}}]}, 0x1c}}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r0], 0x5c}}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32=0x0], 0x24}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 41.830673255s ago: executing program 2 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'lo\x00', {0x1}, 0xbfa}) (async, rerun: 64) r1 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12112, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 64) r3 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) lseek(r6, 0x0, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b2000000000000000000000000000000cef90000000000000000"], 0x50) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r8, 0x1}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x5, 0x1bb3, {{0x8, 0x4, 0x0, 0x24, 0x20, 0x65, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @loopback, {[@end, @lsrr={0x83, 0xb, 0x4a, [@private=0xa010102, @empty]}]}}}}}) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000020060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}, 0x1, 0x0, 0x0, 0x8c1}, 0x24004844) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r9, @ANYRES64=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r12, r14, 0x25, 0x2, @void}, 0x10) r15 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000000000)={0x2c, 0xa, r14, 0x19, r15}, 0x10) 41.730585518s ago: executing program 2 (id=240): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xd, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "3207000000061a74df2cfc06e89f3d9e234b30c50997d3bef40976ff7bfe55cd4a4783cd4a524bd3ff1fcaed1e831fa79a0000000000e000", "675237d90800080000000018090000000000000061b7ad3300", [0x3, 0x6]}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003000)={{r2}, &(0x7f0000002ec0), &(0x7f0000002fc0)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3, r2}, 0x6) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) sendfile(r1, r0, 0x0, 0x10000200000200) r4 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?/o\xdc\xea\x95\x9a\\\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x400, &(0x7f0000000140)={'trans=virtio,', {[{@dfltgid}]}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000180)=[{{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @multicast2}, 0x2, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="69a73eb24babc2a9382f96040346de", 0xf}, {&(0x7f0000000600)="69929296221d0db6f4b20b5960e351c88a1559a5c05e37a5597d3456b7ec141646f9deb9e786b71a586e1cdb5d50793ec44ab738229942db4b5cc0919bd571b4716c057c79fe06cd6891278adfaa195f1a38a0f86620f10a8955982b90cf5ea4ed3d63dfb14ca14077b7ba06969a299a20273ab8e3c4ffcc1dd988f8605a8103550b6666e7856ca48ce043792b569a3659c404ab4b834e3a09351bad4e", 0x9d}, {&(0x7f00000006c0)="67e9642bb941fa119744d4e11db3bdcc6d59fa6e3d2ea1697937eaaf53e553d8a61e63b675aaa83c509fd5d12b46f1f9d271d3f684697c3d27a2dc4ddd4d60826fc1d82adf4d628851bea1760b730d965ee7cf01cc5cf537a3f9ae88f95af87ce5b1e810a5294114daf73a", 0x6b}, {&(0x7f0000000740)="cef245e573bb", 0x6}], 0x4}}], 0x1, 0x884) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x1, 0x39f, 0x48, 0x4}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 40.479863599s ago: executing program 2 (id=253): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x24040485}, 0x0) socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x24040485}, 0x0) (async) 39.922112678s ago: executing program 2 (id=260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x12}}) r2 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@local}]}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000024}, 0x200c4040) 39.857338085s ago: executing program 32 (id=260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x12}}) r2 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@local}]}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000024}, 0x200c4040) 6.610484312s ago: executing program 0 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x48051}, 0x0) 5.748881461s ago: executing program 0 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x8, 0x46, @mcast2, @empty, 0x7800, 0x7800, 0x2, 0x3b}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x2, 0x3, 0x4b, @remote, @local, 0x40, 0x1, 0x3, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x80, 0xf809, 0x3, 0x0, {{0x42, 0x4, 0x3, 0x3d, 0x108, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x44, 0x38, 0x3, 0x5, [{@rand_addr=0x64010100, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20009}, {@empty, 0x400}, {@multicast1, 0x9}, {@multicast2, 0x7fffffff}, {@local, 0xd98}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xd}, {@empty, 0xe8e}]}, @timestamp_prespec={0x44, 0x4c, 0x5a, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9a}, {@empty, 0x8001}, {@remote}, {@loopback, 0x7}, {@multicast2, 0x9}, {@empty, 0x8}, {@loopback, 0x9e5f}, {@broadcast, 0x2}, {@local, 0xbee5}]}, @timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0x5, [{@empty, 0x9}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @end, @noop, @rr={0x7, 0x7, 0xa5, [@private=0xa010102]}, @end, @timestamp={0x44, 0x20, 0x5, 0x0, 0x1, [0x8, 0x4, 0x3, 0x6, 0x9, 0x7fffffff, 0x8]}, @cipso={0x86, 0x16, 0x1, [{0x2, 0x7, "7b79f28d9e"}, {0x6, 0x9, "3d40b684c44670"}]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000c40)="f6195580315e63b9f7f85dd6f55f0305181d95d6ab30746ffbb81dd192dc45766113a114eacc2e65e97e73a018fa43d05bc96b4290b5fc016c5964082ae619652f901802b5a3107fe33ee6cdebd1806ea2e5e4ecb2e18e51f2b3b26462bee783bf60a2681e185c886b9982d683", 0x6d}, {&(0x7f0000000680)="b2d4998123", 0x5}], 0x2, &(0x7f0000000a80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x7, 0xc7, [@loopback]}, @ssrr={0x89, 0x7, 0x91, [@private=0xa010102]}, @timestamp_addr={0x44, 0x4, 0x7b, 0x1, 0x7}, @rr={0x7, 0x3, 0x3d}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0xc0}}], 0x2, 0x8014) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000240)=0x3b, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000100)={0x6, 'vlan0\x00', {0x9}, 0x200}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4002, 0x0, @empty, 0xbff}, @ib={0x1b, 0xffff, 0x1, {"9b04461285dc18ea7bdd58f6f80a9cb7"}, 0x5, 0x57, 0x3d7}}}, 0x118) getsockopt$packet_int(r8, 0x107, 0xe, 0x0, &(0x7f0000001240)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000010", @ANYRES32=r1, @ANYRESOCT=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="e68950084ccf77537def9e8f02e4ed62c25b80635eced41bd55a40123508e99165a42c78ea296bdec08d28d2be089a8716c890c016714c4f6c77901bd5ac4e44204c9e845dae1a9651c4b470a4f7d23da30af20a160d766623bac56be761dbf905e789175d50d0b29a816e29ed66175bdf72cb31113dc08c5c4eebb18b483d1bb74db24d0a4b356a3c276dd1c52bc618aa0e6892636dd8d2510d54a0450dd02594b8396ed4388dbee1af352a679ed95b51649fd4f4aa4e21f1bc9ffef79908", 0xbf}, {&(0x7f0000000300)="f375a5cb0a5f85ec7d9a1053c5425b3345d42db5450f1738e5c3cc333afda380161090bd899572fc946f72cc725ffa8a5ad0e694d2ae25df7dcbcf4805b2ae4368003e78f69683e407ff7c8db1cf16e91e4b63533deab835980adecaa8433ea3f559e0f406cc992b0d9b28739533957fa54363cd12a0fdc122", 0x79}, {&(0x7f0000000380)="0ed5d29534300de2d00a6ded9855af244f91e69d1af6845e54ccdc394d1222de23490b06983aa8ebfcf8880879bbfd7fe6a828dc68146ec046", 0x39}, {&(0x7f00000003c0)="40344c34122cc2170f40fb", 0xb}, {&(0x7f0000000400)="2ef7e8091d529d4e85d88d99912c7f244e", 0x11}, {&(0x7f0000000440)="bbe3a1ca60648695d899d76e206a4cb36373f031cb69d30e93065c76eeac08f8ecaa38abcaa59af3b4e39e69311f0794085baac6efc7e080f9fbad5706cf53cf7cb7b0bb03b02c48232f1b4b1068e4d848409ad7de93e06b83c1028fb1a38333a61251814418bd37403000f712656b25def7c2e6aef3784d5229e5ac053c73e6b9c257a154acf607acdf3ef5", 0x8c}], 0x6, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}, 0x2) 5.700278663s ago: executing program 0 (id=532): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006f00), 0x40000000000000c, 0x60000020, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001800}, 0x8040) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001800}, 0x8040) landlock_restrict_self(0xffffffffffffffff, 0x8) 4.829150526s ago: executing program 0 (id=542): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x200000005c831, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x10, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xaa901, 0x28) write$tcp_congestion(r2, 0x0, 0x0) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000040)=[0x1], &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x2) 2.540042689s ago: executing program 1 (id=555): syz_emit_ethernet(0x22, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @dev, @local}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xd, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0xfffffffd}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)={0x4000, 0x2, [{r2, 0x0, 0x4000, 0x8000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 2.480474789s ago: executing program 0 (id=556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e26, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) poll(&(0x7f0000000140)=[{r1, 0x510}], 0x1, 0xae1) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x1020, r2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450e00280064000007069078ac1414bb694c14bb4e224e22ba8e53269ea40c56079ffc4c468642e44f6e031f0e63d4f823e49a5228fdc1a713778ce734727fad87d44e86cfd2c696cc79c97ed5fa2d0529eecef6091f12450d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c26071907800e7"], 0x0) 2.399789357s ago: executing program 1 (id=557): r0 = socket$unix(0x1, 0x1, 0x0) r1 = inotify_init1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r2, &(0x7f00000006c0)=[{0xe, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @queue={0xa, {0x7, 0x2}}}], 0x1c) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x24000420) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000180)) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @null, @netrom, @rose, @default, @remote, @remote, @null]}, &(0x7f0000000080)=0x48, 0x80800) fsetxattr$security_ima(r5, &(0x7f0000000140), &(0x7f00000001c0)=ANY=[@ANYBLOB="04f1262da9e88f32ecee8b06868d5bb948"], 0x8, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000000000088a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a093424cf6dc99d2466980300", 0x38414761}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) listen(r0, 0x0) shutdown(r0, 0x0) accept(r0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r8, 0x800c0910, 0x200000000005) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r10 = syz_open_dev$dvb_frontend(&(0x7f00000008c0), 0x0, 0x141000) ioctl$FE_READ_UNCORRECTED_BLOCKS(r10, 0x80046f49, &(0x7f0000000900)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000280)={r9, 0x2, 0x0, 0x6, &(0x7f0000000240)=[{0x9d23, 0x5, 0x2, 0x9}, {0x7, 0x1, 0x0, 0x7}, {0x100, 0x79f0, 0x7ff, 0x7}, {0xfff, 0x7, 0x7, 0x8}, {0xdbe, 0x3d5c, 0xffff, 0x2}, {0x266e, 0x9, 0xf59e, 0x4}]}) 2.269090211s ago: executing program 1 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x8, 0x46, @mcast2, @empty, 0x7800, 0x7800, 0x2, 0x3b}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x2, 0x3, 0x4b, @remote, @local, 0x40, 0x1, 0x3, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x80, 0xf809, 0x3, 0x0, {{0x44, 0x4, 0x3, 0x3d, 0x110, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x44, 0x38, 0x3, 0x5, [{@rand_addr=0x64010100, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20009}, {@empty, 0x400}, {@multicast1, 0x9}, {@multicast2, 0x7fffffff}, {@local, 0xd98}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xd}, {@empty, 0xe8e}]}, @timestamp_prespec={0x44, 0x4c, 0x5a, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9a}, {@empty, 0x8001}, {@remote}, {@loopback, 0x7}, {@multicast2, 0x9}, {@empty, 0x8}, {@loopback, 0x9e5f}, {@broadcast, 0x2}, {@local, 0xbee5}]}, @timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0x5, [{@empty, 0x9}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @cipso={0x86, 0x6, 0x3}, @end, @noop, @rr={0x7, 0x7, 0xa5, [@private=0xa010102]}, @end, @timestamp={0x44, 0x20, 0x5, 0x0, 0x1, [0x8, 0x4, 0x3, 0x6, 0x9, 0x7fffffff, 0x8]}, @cipso={0x86, 0x16, 0x1, [{0x2, 0x7, "7b79f28d9e"}, {0x6, 0x9, "3d40b684c44670"}]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000c40)="f6195580315e63b9f7f85dd6f55f0305181d95d6ab30746ffbb81dd192dc45766113a114eacc2e65e97e73a018fa43d05bc96b4290b5fc016c5964082ae619652f901802b5a3107fe33ee6cdebd1806ea2e5e4ecb2e18e51f2b3b26462bee783bf60a2681e185c886b9982d683", 0x6d}, {&(0x7f0000000680)="b2d4998123", 0x5}], 0x2, &(0x7f0000000a80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x7, 0xc7, [@loopback]}, @ssrr={0x89, 0x7, 0x91, [@private=0xa010102]}, @timestamp_addr={0x44, 0x4, 0x7b, 0x1, 0x7}, @rr={0x7, 0x3, 0x3d}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0xc0}}], 0x2, 0x8014) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000240)=0x3b, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000100)={0x6, 'vlan0\x00', {0x9}, 0x200}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4002, 0x0, @empty, 0xbff}, @ib={0x1b, 0xffff, 0x1, {"9b04461285dc18ea7bdd58f6f80a9cb7"}, 0x5, 0x57, 0x3d7}}}, 0x118) getsockopt$packet_int(r8, 0x107, 0xe, 0x0, &(0x7f0000001240)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000010", @ANYRES32=r1, @ANYRESOCT=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="e68950084ccf77537def9e8f02e4ed62c25b80635eced41bd55a40123508e99165a42c78ea296bdec08d28d2be089a8716c890c016714c4f6c77901bd5ac4e44204c9e845dae1a9651c4b470a4f7d23da30af20a160d766623bac56be761dbf905e789175d50d0b29a816e29ed66175bdf72cb31113dc08c5c4eebb18b483d1bb74db24d0a4b356a3c276dd1c52bc618aa0e6892636dd8d2510d54a0450dd02594b8396ed4388dbee1af352a679ed95b51649fd4f4aa4e21f1bc9ffef79908", 0xbf}, {&(0x7f0000000300)="f375a5cb0a5f85ec7d9a1053c5425b3345d42db5450f1738e5c3cc333afda380161090bd899572fc946f72cc725ffa8a5ad0e694d2ae25df7dcbcf4805b2ae4368003e78f69683e407ff7c8db1cf16e91e4b63533deab835980adecaa8433ea3f559e0f406cc992b0d9b28739533957fa54363cd12a0fdc122", 0x79}, {&(0x7f0000000380)="0ed5d29534300de2d00a6ded9855af244f91e69d1af6845e54ccdc394d1222de23490b06983aa8ebfcf8880879bbfd7fe6a828dc68146ec046", 0x39}, {&(0x7f00000003c0)="40344c34122cc2170f40fb", 0xb}, {&(0x7f0000000400)="2ef7e8091d529d4e85d88d99912c7f244e", 0x11}, {&(0x7f0000000440)="bbe3a1ca60648695d899d76e206a4cb36373f031cb69d30e93065c76eeac08f8ecaa38abcaa59af3b4e39e69311f0794085baac6efc7e080f9fbad5706cf53cf7cb7b0bb03b02c48232f1b4b1068e4d848409ad7de93e06b83c1028fb1a38333a61251814418bd37403000f712656b25def7c2e6aef3784d5229e5ac053c73e6b9c257a154acf607acdf3ef5", 0x8c}], 0x6, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}, 0x2) 1.509347873s ago: executing program 3 (id=562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000680)="e9906d379050a77f78c95e9c0f9f698f562f1104b9d4e6b66569d622324fb5ba51959ff7c5b9befd049aca6eca07f4a4b663c2b58c05d882739b59087c3dafecd1c06d1d1262b718d0a58adb89d85a9b4352856b1331ebf51e206cf57104f9e352006bf2ff176102a3e550", 0x6b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9bd9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@generic={0x2b, "76f0a51477bec279437f5ff90bceda38792f4488dcd39001ab381a4842a37ffcfd0fe4900404a19ff383f228c29d934efd11da8c458ab1cd66da795cdd22bd6ae738f7aa6308adf4e522c93668853f8bdeb974fe730a0d72728f41f50058d46e1774bff9ea5f343d86b70dfda59a9d2f113ff7eae1a38147d1b75dbc2f59"}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000700)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2c}}], 0x48}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x5, 0x20000044) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x57ac, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x3, 0x2b4}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="60000000ef35a904ac9480083a0bf08350b73ee25870f87855e169d47ae126efa3baf0d22c1487c61947372fcf2b3e8626a4e9fc42751aa2c5f3f10441917af6f4", @ANYRES16=r6, @ANYBLOB="01082abd7000000000002a00000008005800000000000800010070636900f2ff0200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x60}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x1) ppoll(&(0x7f0000004b80)=[{r4, 0x200}], 0x1, &(0x7f0000004bc0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1.411276571s ago: executing program 1 (id=563): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x6a0, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x67c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x51}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x86b, 0x6, 0x7ff, 0xa, 0x4, 0x4, 0x6f44, 0x6a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff, 0xfff9, 0xd552, 0x8001, 0xfff5, 0x9, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x6, 0xb, 0x2, 0x18, 0x18, 0x1b, 0x6c, 0x9, 0x24, 0x9, 0x48, 0xb, 0x48, 0x18, 0x0, 0x5, 0x0, 0x62, 0xb, 0x60, 0x12, 0x60, 0x6, 0x48, 0x36, 0x6, 0x16, 0x5, 0x30, 0x16, 0x16]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x18}, {0x7, 0x4}, {0x3}, {0x0, 0x6}, {0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x4, 0xb}, {0x1, 0xa}, {}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x9}, {0x1, 0x8}, {0x4}, {}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x3}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x5, 0x2, 0x8001, 0x8, 0xe, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1}, {0x6, 0x3}, {0x4, 0x7}, {0x3, 0x6}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0x9}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x5}, {0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x6}, {0x5, 0x9}, {0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0x9}, {0x2, 0xa}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {0x4}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x1}, {}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x1, 0x3ff, 0x3, 0x5, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0xa}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x3}, {0x1}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7f, 0x5e3, 0x0, 0x1, 0xf, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x5}, {0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x5}, {0x5, 0x1}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {0x6, 0x9}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x7ff, 0x520, 0x3, 0x6, 0x1ff, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x0, 0x1158, 0xc, 0x80, 0x700, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x12, 0x22]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x4, 0x0, 0x228, 0x4, 0x9, 0x7]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x3, 0x30, 0x60, 0x6, 0x16, 0x36, 0x6, 0x12, 0x6, 0x1b, 0x48, 0x48]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x1}, {0x6, 0x5}, {0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {}, {0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0xa}, {0x6, 0x2}, {0x5, 0x5}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x1}, {0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb, 0x5, 0x8, 0x8, 0x7, 0x2, 0xfd83]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x3, 0x52d7, 0x8001, 0x4000, 0xfff4, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x7, 0x3}, {0x7, 0x9}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x2}, {0x4, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x5}, {0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xb, 0x6c, 0xc, 0x18, 0x1, 0x5, 0x16, 0x5a, 0x2, 0x36, 0x1b, 0x48, 0x48, 0xc, 0x18, 0x1, 0x48, 0x5, 0x9, 0x24, 0x5, 0x2, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xc, 0x6, 0x6c, 0x0, 0x6, 0x5, 0x30, 0x6, 0x9, 0x36, 0x36, 0x5, 0x48, 0xc, 0x5, 0x30, 0x24, 0x16, 0x9, 0x2, 0x2, 0x6c, 0x9, 0x3, 0x60, 0x6c, 0x0, 0xb]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x3, 0xffff, 0x8000, 0x5, 0x4, 0x0, 0xc6]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x8}, {0x5, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0xa}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x2, 0x7}, {0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x2}, {0x2}, {0x5}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x1}, {0x7}, {0x3, 0x5}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {}, {}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x4}, {0x5, 0x3}, {0x2, 0x6}, {0x4, 0x3}, {0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x7}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x4}, {0x2}, {0x2, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x8, 0x200, 0xf532, 0xb, 0x100, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x5, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0xa}, {0x0, 0x1}, {0x1}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x5, 0x6}, {0x5, 0x8}, {0x6, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x10, 0x2, 0x6, 0x3, 0x7, 0x4, 0x8]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xd, 0x119, 0x1, 0x4, 0x7ff, 0x8]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}]}]}]}, 0x6a0}}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='erspan0\x00', 0x10) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.360553033s ago: executing program 1 (id=564): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) 1.360093303s ago: executing program 3 (id=565): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0x3ff, 0x4) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xc6, 0x8, 0x208}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) socket$unix(0x1, 0x5, 0x0) recvmmsg(r1, &(0x7f0000002c40)=[{{&(0x7f0000000140)=@ax25={{0x3, @bcast}, [@null, @null, @bcast, @remote, @default, @remote, @default, @netrom]}, 0x80, &(0x7f0000002940)=[{&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000001580)=""/27, 0x1b}, {&(0x7f00000015c0)=""/166, 0xa6}, {&(0x7f0000001680)=""/186, 0xba}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x8, &(0x7f0000001740)=""/216, 0xd8}, 0x3}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/90, 0x5a}], 0x1000000000000272, &(0x7f0000000280)=""/166, 0xa6}, 0xd}], 0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001800010000000000fedbdf251d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="150004"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x4000, 0x2, [{r3, 0x0, 0x4000, 0x8000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000}]}) 1.291950302s ago: executing program 1 (id=567): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) timer_gettime(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) unshare(0x6020400) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsmount(r2, 0x0, 0x0) setreuid(0x0, 0xee00) syz_clone3(0x0, 0x0) 1.180544973s ago: executing program 3 (id=568): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r0, r0, 0x0, 0xdecc) msgget$private(0x0, 0x100) 1.130026722s ago: executing program 3 (id=569): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0x4018aee2, &(0x7f0000000500)={0x59}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) socket$packet(0x11, 0x2, 0x300) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) (async) ioctl$KVM_GET_MSRS_sys(r3, 0x4018aee2, &(0x7f0000000500)={0x59}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) (async) 901.093321ms ago: executing program 0 (id=573): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendfile(r1, r1, 0x0, 0x10000000009) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) 900.344912ms ago: executing program 3 (id=574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a9e"], 0x64}}, 0x0) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x20008044, 0x0, 0x3c) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x3c) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRES64=r9, @ANYBLOB="010025bd7000fedbdf250c00000008000300", @ANYRES32=r9, @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x804) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES16=r10, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="08002600800900000800270002000000"], 0x2c}}, 0x20004800) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="0004c15e43016c0d1daf0225bd7000fcdbdf253400", @ANYRES32=r12, @ANYBLOB="08001f010000000014005500d5402c80b507926da4ccc8d44a1eba4614005500e5c9cf8205ccba6c1d7f02e59fe092dd1400fe00c920bfcb457dea798f324ed8d4b4c41c1400fe00a15b222b501b916e2c503d17471d48f50a003400020202020202000005002001460000000600fd00fdff00000a0034000202020202020000"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 659.164947ms ago: executing program 4 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getnexthop={0x40, 0x6a, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008050}, 0x24000840) 569.809886ms ago: executing program 4 (id=579): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x3}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) getsockname$packet(r8, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r1, @ANYBLOB="000227bd7000fcdbdf25190000005800018014000200776730000000000000000000000000001400020067726574617030000000000800030003010000080001000000000000197051174b0a963f7b359b128cf001d264928c5d4d6dcf6c820c6e432da780e8e5b47d9b39aa9e9ea21bb33306897b979614a95dffa28ccba04e12487e6e7659975a97780677f54e102c270611635852222490ffcaea2c1f3e9b62ad9227a3d4601742789090b08fe9761f043e4137dad4d6bd9a3af90c171d3901543b72b92b4e8c88d0111cdac30c3e647e4913d3ae90e4", @ANYRES32=r2, @ANYBLOB="08000300020000001400020070696d367265670000000000000000005c0001801400020073797a6b616c6c657231000000000000140002006261746164765f736c6176655f3100001400020069703665727370616e3000000000000014000200626f6e645f736c6176655f3000000000080003000300000070000180080003000000000008000100", @ANYRES32=r4, @ANYBLOB="08000300000000000800030003000000140002006c6f00000000000000000000000000001400020064756d6d79300000000000000000000014000200766c616e31000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7c000180140002006d6163766c616e31000000000000000014000200766c616e300000000000000000000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000300020000000800030001000000080003000100000014000200"/44], 0x1b4}, 0x1, 0x0, 0x0, 0x40890}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 358.99923ms ago: executing program 4 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x8, 0x46, @mcast2, @empty, 0x7800, 0x7800, 0x2, 0x3b}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x2, 0x3, 0x4b, @remote, @local, 0x40, 0x1, 0x3, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x80, 0xf809, 0x3, 0x0, {{0x44, 0x4, 0x3, 0x3d, 0x110, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x44, 0x38, 0x3, 0x5, [{@rand_addr=0x64010100, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20009}, {@empty, 0x400}, {@multicast1, 0x9}, {@multicast2, 0x7fffffff}, {@local, 0xd98}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xd}, {@empty, 0xe8e}]}, @timestamp_prespec={0x44, 0x4c, 0x5a, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9a}, {@empty, 0x8001}, {@remote}, {@loopback, 0x7}, {@multicast2, 0x9}, {@empty, 0x8}, {@loopback, 0x9e5f}, {@broadcast, 0x2}, {@local, 0xbee5}]}, @timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0x5, [{@empty, 0x9}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @cipso={0x86, 0x6, 0x3}, @end, @noop, @rr={0x7, 0x7, 0xa5, [@private=0xa010102]}, @end, @timestamp={0x44, 0x20, 0x5, 0x0, 0x1, [0x8, 0x4, 0x3, 0x6, 0x9, 0x7fffffff, 0x8]}, @cipso={0x86, 0x16, 0x1, [{0x2, 0x7, "7b79f28d9e"}, {0x6, 0x9, "3d40b684c44670"}]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000c40)="f6195580315e63b9f7f85dd6f55f0305181d95d6ab30746ffbb81dd192dc45766113a114eacc2e65e97e73a018fa43d05bc96b4290b5fc016c5964082ae619652f901802b5a3107fe33ee6cdebd1806ea2e5e4ecb2e18e51f2b3b26462bee783bf60a2681e185c886b9982d683", 0x6d}, {&(0x7f0000000680)="b2d4998123", 0x5}], 0x2, &(0x7f0000000a80)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x7, 0xc7, [@loopback]}, @ssrr={0x89, 0x7, 0x91, [@private=0xa010102]}, @timestamp_addr={0x44, 0x4, 0x7b, 0x1, 0x7}, @rr={0x7, 0x3, 0x3d}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0xc0}}], 0x2, 0x8014) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000240)=0x3b, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000100)={0x6, 'vlan0\x00', {0x9}, 0x200}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4002, 0x0, @empty, 0xbff}, @ib={0x1b, 0xffff, 0x1, {"9b04461285dc18ea7bdd58f6f80a9cb7"}, 0x5, 0x57, 0x3d7}}}, 0x118) getsockopt$packet_int(r8, 0x107, 0xe, 0x0, &(0x7f0000001240)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000010", @ANYRES32=r1, @ANYRESOCT=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="e68950084ccf77537def9e8f02e4ed62c25b80635eced41bd55a40123508e99165a42c78ea296bdec08d28d2be089a8716c890c016714c4f6c77901bd5ac4e44204c9e845dae1a9651c4b470a4f7d23da30af20a160d766623bac56be761dbf905e789175d50d0b29a816e29ed66175bdf72cb31113dc08c5c4eebb18b483d1bb74db24d0a4b356a3c276dd1c52bc618aa0e6892636dd8d2510d54a0450dd02594b8396ed4388dbee1af352a679ed95b51649fd4f4aa4e21f1bc9ffef79908", 0xbf}, {&(0x7f0000000300)="f375a5cb0a5f85ec7d9a1053c5425b3345d42db5450f1738e5c3cc333afda380161090bd899572fc946f72cc725ffa8a5ad0e694d2ae25df7dcbcf4805b2ae4368003e78f69683e407ff7c8db1cf16e91e4b63533deab835980adecaa8433ea3f559e0f406cc992b0d9b28739533957fa54363cd12a0fdc122", 0x79}, {&(0x7f0000000380)="0ed5d29534300de2d00a6ded9855af244f91e69d1af6845e54ccdc394d1222de23490b06983aa8ebfcf8880879bbfd7fe6a828dc68146ec046", 0x39}, {&(0x7f00000003c0)="40344c34122cc2170f40fb", 0xb}, {&(0x7f0000000400)="2ef7e8091d529d4e85d88d99912c7f244e", 0x11}, {&(0x7f0000000440)="bbe3a1ca60648695d899d76e206a4cb36373f031cb69d30e93065c76eeac08f8ecaa38abcaa59af3b4e39e69311f0794085baac6efc7e080f9fbad5706cf53cf7cb7b0bb03b02c48232f1b4b1068e4d848409ad7de93e06b83c1028fb1a38333a61251814418bd37403000f712656b25def7c2e6aef3784d5229e5ac053c73e6b9c257a154acf607acdf3ef5", 0x8c}], 0x6, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}, 0x2) 357.560446ms ago: executing program 4 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000440)={{&(0x7f0000000380)=""/123, 0x7b}, &(0x7f0000000400)}, 0x20) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xf6ff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x84042, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0xffff}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b, 0x10, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f8002ed1f3c4da06963dd89d130e0f0374c32a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e20000000000000000000000e900"}}) (async) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x10000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r5, 0x31f, &(0x7f0000000080)={0x22, 0x1, 0xde, 0x1}) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000180)={'veth1\x00', @multicast}) rmdir(&(0x7f0000000200)='./file0\x00') (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001300010000f8dbdf2500000000000000", @ANYRES32=r4, @ANYBLOB="07300000090400000a000100aaaaaaaaaa1b000004001880"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 309.969192ms ago: executing program 4 (id=582): modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f00000002c0)={0x4, 0x3e, "e9ffdab00531b0bc2a855a981a9be89059d1e4c1d1c2ce04316f93596834c022c5ef5616d68bd19514a464749f3d3daca8af201ad18e197c3901a5e6c81a"}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x7}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x4, 0x0, 0x0, 0x3, 0x2, 0x7000000}}, {0x4, 0x1b}}]}]}, 0x50}}, 0x4000004) r6 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r6, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffa, 0x12, 0x1e, 0x9, "4b8b3ea40100dfed0b2f3409000000dd5a1f0ececfe0f4fcdf997dd52115fac256cf08000000000000030000000000000000000000ea00", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xe]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x40000000, @mcast2, 0x9}]}, &(0x7f0000000080)=0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000180), 0x4) modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f00000002c0)={0x4, 0x3e, "e9ffdab00531b0bc2a855a981a9be89059d1e4c1d1c2ce04316f93596834c022c5ef5616d68bd19514a464749f3d3daca8af201ad18e197c3901a5e6c81a"}) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) gettid() (async) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) landlock_restrict_self(r4, 0xc) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x7}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x4, 0x0, 0x0, 0x3, 0x2, 0x7000000}}, {0x4, 0x1b}}]}]}, 0x50}}, 0x4000004) (async) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) (async) ioctl$LOOP_SET_STATUS(r6, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffa, 0x12, 0x1e, 0x9, "4b8b3ea40100dfed0b2f3409000000dd5a1f0ececfe0f4fcdf997dd52115fac256cf08000000000000030000000000000000000000ea00", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xe]}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x40000000, @mcast2, 0x9}]}, &(0x7f0000000080)=0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000180), 0x4) (async) 118.713075ms ago: executing program 4 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x3, 0x0, r3}) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000280)=0xa) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc804}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 0s ago: executing program 3 (id=584): msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000080)) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000240)) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r4, 0xab03) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/118) msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) socket(0x2, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) (async) getdents64(r2, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000080)) (async) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000240)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async) ioctl$NBD_DO_IT(r4, 0xab03) (async) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/118) (async) kernel console output (not intermixed with test programs): ave_1) entered blocking state [ 63.473471][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.476178][ T5941] bridge_slave_1: entered allmulticast mode [ 63.478806][ T5941] bridge_slave_1: entered promiscuous mode [ 63.505456][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.520036][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.532344][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.537529][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.554546][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.559345][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.601968][ T5941] team0: Port device team_slave_0 added [ 63.603803][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.606723][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.609935][ T5940] bridge_slave_0: entered allmulticast mode [ 63.613069][ T5940] bridge_slave_0: entered promiscuous mode [ 63.616687][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.619047][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.621594][ T5940] bridge_slave_1: entered allmulticast mode [ 63.624978][ T5940] bridge_slave_1: entered promiscuous mode [ 63.628311][ T5933] team0: Port device team_slave_0 added [ 63.631726][ T5933] team0: Port device team_slave_1 added [ 63.646260][ T5941] team0: Port device team_slave_1 added [ 63.683646][ T5932] team0: Port device team_slave_0 added [ 63.693382][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.695884][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.704343][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.709357][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.712318][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.723170][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.729007][ T5932] team0: Port device team_slave_1 added [ 63.732210][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.735789][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.738155][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.746839][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.751106][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.754284][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.765170][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.778319][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.839287][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.841807][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.850371][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.872782][ T5941] hsr_slave_0: entered promiscuous mode [ 63.876405][ T5941] hsr_slave_1: entered promiscuous mode [ 63.891620][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.894919][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.906821][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.917215][ T5933] hsr_slave_0: entered promiscuous mode [ 63.920521][ T5933] hsr_slave_1: entered promiscuous mode [ 63.923745][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 63.926634][ T5933] Cannot create hsr debugfs directory [ 63.930903][ T5940] team0: Port device team_slave_0 added [ 63.936307][ T5940] team0: Port device team_slave_1 added [ 64.009854][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.012739][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.023732][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.054748][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.057535][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.068480][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.089597][ T5932] hsr_slave_0: entered promiscuous mode [ 64.092603][ T5932] hsr_slave_1: entered promiscuous mode [ 64.095088][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 64.096909][ T5932] Cannot create hsr debugfs directory [ 64.202147][ T5940] hsr_slave_0: entered promiscuous mode [ 64.205908][ T5940] hsr_slave_1: entered promiscuous mode [ 64.208917][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 64.211348][ T5940] Cannot create hsr debugfs directory [ 64.441086][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.448619][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.452948][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.465097][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.499103][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.506367][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.513578][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.547299][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.584909][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.594329][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.598866][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.615391][ T5937] Bluetooth: hci1: command tx timeout [ 64.622114][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.693212][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.700691][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.704447][ T5938] Bluetooth: hci0: command tx timeout [ 64.704818][ T5939] Bluetooth: hci2: command tx timeout [ 64.707398][ T5937] Bluetooth: hci3: command tx timeout [ 64.708347][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.729809][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.740445][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.786926][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.813477][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.816884][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.827489][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.834501][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.836892][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.849420][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.868800][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.872169][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.889725][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.892865][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.898985][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.901889][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.915934][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.918221][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.922968][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.925313][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.948697][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.999352][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.005008][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 65.005019][ T40] audit: type=1400 audit(1775481958.528:92): avc: denied { sys_module } for pid=5941 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.015878][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.028096][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.030345][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.048025][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.050294][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.130264][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.142567][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.173397][ T5932] veth0_vlan: entered promiscuous mode [ 65.193031][ T5932] veth1_vlan: entered promiscuous mode [ 65.203665][ T5941] veth0_vlan: entered promiscuous mode [ 65.208290][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.220788][ T5941] veth1_vlan: entered promiscuous mode [ 65.241920][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.251197][ T5932] veth0_macvtap: entered promiscuous mode [ 65.265617][ T5932] veth1_macvtap: entered promiscuous mode [ 65.291116][ T5941] veth0_macvtap: entered promiscuous mode [ 65.303430][ T5933] veth0_vlan: entered promiscuous mode [ 65.307306][ T5941] veth1_macvtap: entered promiscuous mode [ 65.318373][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.325545][ T5940] veth0_vlan: entered promiscuous mode [ 65.334559][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.340018][ T5933] veth1_vlan: entered promiscuous mode [ 65.348728][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.359627][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.362601][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.377744][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.380282][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.387233][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.397671][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.401387][ T5940] veth1_vlan: entered promiscuous mode [ 65.407888][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.410842][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.427724][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.467622][ T5933] veth0_macvtap: entered promiscuous mode [ 65.482112][ T5940] veth0_macvtap: entered promiscuous mode [ 65.492836][ T5933] veth1_macvtap: entered promiscuous mode [ 65.509227][ T5940] veth1_macvtap: entered promiscuous mode [ 65.531828][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.531828][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.531855][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.542074][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.554765][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.578834][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.582670][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.597207][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.601564][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.607394][ T184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.608067][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.626977][ T184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631041][ T184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.638293][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.641233][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.644428][ T40] audit: type=1400 audit(1775481959.158:93): avc: denied { mount } for pid=5941 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.651365][ T40] audit: type=1400 audit(1775481959.158:94): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/syzkaller.dOIXcU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.656389][ T184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.662078][ T40] audit: type=1400 audit(1775481959.178:95): avc: denied { mount } for pid=5941 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.664316][ T184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.670674][ T40] audit: type=1400 audit(1775481959.178:96): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/syzkaller.dOIXcU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.682749][ T40] audit: type=1400 audit(1775481959.178:97): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/syzkaller.dOIXcU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.692080][ T40] audit: type=1400 audit(1775481959.178:98): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.698849][ T40] audit: type=1400 audit(1775481959.208:99): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.706489][ T40] audit: type=1400 audit(1775481959.218:100): avc: denied { mount } for pid=5941 comm="syz-executor" name="/" dev="gadgetfs" ino=9509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.713687][ T184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716171][ T40] audit: type=1400 audit(1775481959.218:101): avc: denied { mount } for pid=5941 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.717040][ T184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.730798][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.741166][ T184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.806631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.809219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.848275][ T6022] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 65.859963][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.865640][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.899114][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.903034][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.944825][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.948163][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.180860][ T6033] bond1: Unable to set up delay as MII monitoring is disabled [ 66.188492][ T6033] bond1 (unregistering): Released all slaves [ 66.428563][ T6061] cgroup: Name too long [ 66.430986][ T6061] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 66.439105][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 66.444601][ T6061] bpf: Bad value for 'uid' [ 66.445643][ T6064] pimreg9: entered allmulticast mode [ 66.532662][ T6068] program syz.2.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.609430][ T6080] openvswitch: netlink: EtherType 50a is less than min 600 [ 66.694274][ T5937] Bluetooth: hci1: command tx timeout [ 66.784768][ T5937] Bluetooth: hci3: command tx timeout [ 66.786691][ T5937] Bluetooth: hci2: command tx timeout [ 66.788569][ T5937] Bluetooth: hci0: command tx timeout [ 66.934122][ T5999] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 67.060242][ T6095] FAULT_INJECTION: forcing a failure. [ 67.060242][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 67.065446][ T6095] CPU: 3 UID: 0 PID: 6095 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(full) [ 67.065463][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.065470][ T6095] Call Trace: [ 67.065475][ T6095] [ 67.065480][ T6095] dump_stack_lvl+0x100/0x190 [ 67.065504][ T6095] should_fail_ex.cold+0x5/0xa [ 67.065521][ T6095] should_failslab+0xc2/0x120 [ 67.065533][ T6095] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 67.065549][ T6095] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 67.065570][ T6095] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 67.065590][ T6095] mmu_topup_memory_caches+0x25/0x170 [ 67.065604][ T6095] kvm_mmu_load+0xd6/0x23e0 [ 67.065616][ T6095] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 67.065632][ T6095] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 67.065649][ T6095] ? __pfx_kvm_mmu_load+0x10/0x10 [ 67.065660][ T6095] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 67.065677][ T6095] ? kvm_check_and_inject_events+0x961/0x10c0 [ 67.065690][ T6095] ? record_steal_time+0x410/0xbe0 [ 67.065707][ T6095] vcpu_run+0x39f4/0x5ca0 [ 67.065724][ T6095] ? __pfx_vcpu_run+0x10/0x10 [ 67.065741][ T6095] ? rcu_is_watching+0x12/0xc0 [ 67.065758][ T6095] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 67.065771][ T6095] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 67.065787][ T6095] kvm_vcpu_ioctl+0x730/0x1730 [ 67.065804][ T6095] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.065821][ T6095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.065837][ T6095] ? do_vfs_ioctl+0x226/0x13e0 [ 67.065855][ T6095] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 67.065871][ T6095] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.065893][ T6095] ? __fget_files+0x215/0x3d0 [ 67.065904][ T6095] ? hook_file_ioctl_common+0x146/0x410 [ 67.065920][ T6095] ? selinux_file_ioctl+0x139/0x290 [ 67.065935][ T6095] ? selinux_file_ioctl+0xb4/0x290 [ 67.065952][ T6095] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.065968][ T6095] __x64_sys_ioctl+0x18e/0x210 [ 67.065986][ T6095] do_syscall_64+0x106/0xf80 [ 67.066001][ T6095] ? clear_bhb_loop+0x40/0x90 [ 67.066014][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.066025][ T6095] RIP: 0033:0x7f186959c819 [ 67.066035][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.066045][ T6095] RSP: 002b:00007f186a524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.066056][ T6095] RAX: ffffffffffffffda RBX: 00007f1869815fa0 RCX: 00007f186959c819 [ 67.066062][ T6095] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.066068][ T6095] RBP: 00007f186a524090 R08: 0000000000000000 R09: 0000000000000000 [ 67.066074][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.066080][ T6095] R13: 00007f1869816038 R14: 00007f1869815fa0 R15: 00007ffe2d1f74e8 [ 67.066094][ T6095] [ 67.094502][ T5999] usb 7-1: Invalid ep0 maxpacket: 16 [ 67.227712][ T6099] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 67.231068][ T6099] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 67.237671][ T6099] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 67.306595][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 67.380668][ T6104] ptrace attach of "/syz-executor exec"[6105] was attempted by "/syz-executor exec"[6104] [ 67.385458][ T6104] mmap: syz.3.25 (6104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.483101][ T6112] netlink: 'syz.3.27': attribute type 16 has an invalid length. [ 67.486490][ T6112] netlink: 'syz.3.27': attribute type 17 has an invalid length. [ 67.501355][ T6112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.527723][ T6112] xt_hashlimit: size too large, truncated to 1048576 [ 67.745717][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 67.850964][ T6119] netlink: 'syz.2.29': attribute type 39 has an invalid length. [ 68.092024][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.104001][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.115511][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.119078][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.130064][ T6128] FAULT_INJECTION: forcing a failure. [ 68.130064][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 68.135553][ T6128] CPU: 3 UID: 0 PID: 6128 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 68.135570][ T6128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.135576][ T6128] Call Trace: [ 68.135581][ T6128] [ 68.135585][ T6128] dump_stack_lvl+0x100/0x190 [ 68.135610][ T6128] should_fail_ex.cold+0x5/0xa [ 68.135626][ T6128] should_failslab+0xc2/0x120 [ 68.135639][ T6128] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 68.135656][ T6128] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 68.135677][ T6128] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 68.135698][ T6128] mmu_topup_memory_caches+0x25/0x170 [ 68.135713][ T6128] kvm_mmu_load+0xd6/0x23e0 [ 68.135725][ T6128] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 68.135741][ T6128] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.135758][ T6128] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.135770][ T6128] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.135788][ T6128] ? kvm_check_and_inject_events+0x961/0x10c0 [ 68.135800][ T6128] ? record_steal_time+0x410/0xbe0 [ 68.135818][ T6128] vcpu_run+0x39f4/0x5ca0 [ 68.135836][ T6128] ? __pfx_vcpu_run+0x10/0x10 [ 68.135853][ T6128] ? rcu_is_watching+0x12/0xc0 [ 68.135870][ T6128] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 68.135884][ T6128] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 68.135901][ T6128] kvm_vcpu_ioctl+0x730/0x1730 [ 68.135918][ T6128] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.135935][ T6128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.135961][ T6128] ? do_vfs_ioctl+0x226/0x13e0 [ 68.135978][ T6128] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.135995][ T6128] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.136018][ T6128] ? __fget_files+0x215/0x3d0 [ 68.136030][ T6128] ? hook_file_ioctl_common+0x146/0x410 [ 68.136045][ T6128] ? selinux_file_ioctl+0x139/0x290 [ 68.136061][ T6128] ? selinux_file_ioctl+0xb4/0x290 [ 68.136079][ T6128] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.136095][ T6128] __x64_sys_ioctl+0x18e/0x210 [ 68.136113][ T6128] do_syscall_64+0x106/0xf80 [ 68.136124][ T6128] ? clear_bhb_loop+0x40/0x90 [ 68.136138][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.136149][ T6128] RIP: 0033:0x7eff8779c819 [ 68.136160][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.136170][ T6128] RSP: 002b:00007eff8867a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.136181][ T6128] RAX: ffffffffffffffda RBX: 00007eff87a15fa0 RCX: 00007eff8779c819 [ 68.136187][ T6128] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 68.136193][ T6128] RBP: 00007eff8867a090 R08: 0000000000000000 R09: 0000000000000000 [ 68.136199][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.136205][ T6128] R13: 00007eff87a16038 R14: 00007eff87a15fa0 R15: 00007ffd0ca6b428 [ 68.136218][ T6128] [ 68.510741][ T6116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.521276][ T6141] kernel profiling enabled (shift: 63) [ 68.524695][ T6141] profiling shift: 63 too large [ 68.774171][ T5939] Bluetooth: hci1: command tx timeout [ 68.864872][ T5939] Bluetooth: hci0: command tx timeout [ 68.864889][ T5937] Bluetooth: hci2: command tx timeout [ 68.864914][ T5937] Bluetooth: hci3: command tx timeout [ 69.079624][ T6170] FAULT_INJECTION: forcing a failure. [ 69.079624][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 69.088275][ T6170] CPU: 2 UID: 0 PID: 6170 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 69.088301][ T6170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.088312][ T6170] Call Trace: [ 69.088318][ T6170] [ 69.088325][ T6170] dump_stack_lvl+0x100/0x190 [ 69.088361][ T6170] should_fail_ex.cold+0x5/0xa [ 69.088384][ T6170] should_failslab+0xc2/0x120 [ 69.088403][ T6170] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 69.088429][ T6170] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 69.088460][ T6170] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 69.088493][ T6170] mmu_topup_memory_caches+0x25/0x170 [ 69.088513][ T6170] kvm_mmu_load+0xd6/0x23e0 [ 69.088531][ T6170] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 69.088554][ T6170] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 69.088582][ T6170] ? __pfx_kvm_mmu_load+0x10/0x10 [ 69.088599][ T6170] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 69.088625][ T6170] ? kvm_check_and_inject_events+0x961/0x10c0 [ 69.088645][ T6170] ? record_steal_time+0x410/0xbe0 [ 69.088672][ T6170] vcpu_run+0x39f4/0x5ca0 [ 69.088706][ T6170] ? __pfx_vcpu_run+0x10/0x10 [ 69.088734][ T6170] ? rcu_is_watching+0x12/0xc0 [ 69.088759][ T6170] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 69.088779][ T6170] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 69.088806][ T6170] kvm_vcpu_ioctl+0x730/0x1730 [ 69.088832][ T6170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 69.088857][ T6170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.088884][ T6170] ? do_vfs_ioctl+0x226/0x13e0 [ 69.088911][ T6170] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.088936][ T6170] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.088971][ T6170] ? __fget_files+0x215/0x3d0 [ 69.088989][ T6170] ? hook_file_ioctl_common+0x146/0x410 [ 69.089011][ T6170] ? selinux_file_ioctl+0x139/0x290 [ 69.089035][ T6170] ? selinux_file_ioctl+0xb4/0x290 [ 69.089061][ T6170] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 69.089088][ T6170] __x64_sys_ioctl+0x18e/0x210 [ 69.089117][ T6170] do_syscall_64+0x106/0xf80 [ 69.089136][ T6170] ? clear_bhb_loop+0x40/0x90 [ 69.089158][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.089176][ T6170] RIP: 0033:0x7eff8779c819 [ 69.089192][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.089209][ T6170] RSP: 002b:00007eff8867a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.089227][ T6170] RAX: ffffffffffffffda RBX: 00007eff87a15fa0 RCX: 00007eff8779c819 [ 69.089238][ T6170] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.089248][ T6170] RBP: 00007eff8867a090 R08: 0000000000000000 R09: 0000000000000000 [ 69.089257][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.089268][ T6170] R13: 00007eff87a16038 R14: 00007eff87a15fa0 R15: 00007ffd0ca6b428 [ 69.089291][ T6170] [ 69.328249][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 69.385093][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 69.536667][ T6177] kvm: Disabled LAPIC found during irq injection [ 69.540308][ T6177] netlink: 204216 bytes leftover after parsing attributes in process `syz.2.43'. [ 69.686068][ T6179] Zero length message leads to an empty skb [ 69.793788][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 69.797678][ T6181] openvswitch: netlink: Flow actions attr not present in new flow. [ 69.908423][ T6190] syzkaller0: entered promiscuous mode [ 69.910642][ T6190] syzkaller0: entered allmulticast mode [ 69.917086][ T6190] fuse: Unknown parameter 'grouj_id' [ 69.936238][ T1145] Bluetooth: (null): Invalid header checksum [ 69.992761][ T6194] FAULT_INJECTION: forcing a failure. [ 69.992761][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 69.997095][ T6194] CPU: 3 UID: 0 PID: 6194 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(full) [ 69.997110][ T6194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.997117][ T6194] Call Trace: [ 69.997121][ T6194] [ 69.997125][ T6194] dump_stack_lvl+0x100/0x190 [ 69.997150][ T6194] should_fail_ex.cold+0x5/0xa [ 69.997166][ T6194] should_failslab+0xc2/0x120 [ 69.997179][ T6194] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 69.997196][ T6194] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 69.997217][ T6194] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 69.997239][ T6194] mmu_topup_memory_caches+0x25/0x170 [ 69.997253][ T6194] kvm_mmu_load+0xd6/0x23e0 [ 69.997266][ T6194] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 69.997282][ T6194] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 69.997299][ T6194] ? __pfx_kvm_mmu_load+0x10/0x10 [ 69.997310][ T6194] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 69.997329][ T6194] ? kvm_check_and_inject_events+0x961/0x10c0 [ 69.997342][ T6194] ? record_steal_time+0x410/0xbe0 [ 69.997360][ T6194] vcpu_run+0x39f4/0x5ca0 [ 69.997377][ T6194] ? __pfx_vcpu_run+0x10/0x10 [ 69.997395][ T6194] ? rcu_is_watching+0x12/0xc0 [ 69.997412][ T6194] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 69.997425][ T6194] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 69.997442][ T6194] kvm_vcpu_ioctl+0x730/0x1730 [ 69.997460][ T6194] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 69.997477][ T6194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.997494][ T6194] ? do_vfs_ioctl+0x226/0x13e0 [ 69.997511][ T6194] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.997529][ T6194] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.997552][ T6194] ? __fget_files+0x215/0x3d0 [ 69.997564][ T6194] ? hook_file_ioctl_common+0x146/0x410 [ 69.997580][ T6194] ? selinux_file_ioctl+0x139/0x290 [ 69.997595][ T6194] ? selinux_file_ioctl+0xb4/0x290 [ 69.997613][ T6194] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 69.997630][ T6194] __x64_sys_ioctl+0x18e/0x210 [ 69.997648][ T6194] do_syscall_64+0x106/0xf80 [ 69.997659][ T6194] ? clear_bhb_loop+0x40/0x90 [ 69.997673][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.997684][ T6194] RIP: 0033:0x7f186959c819 [ 69.997694][ T6194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.997704][ T6194] RSP: 002b:00007f186a524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.997715][ T6194] RAX: ffffffffffffffda RBX: 00007f1869815fa0 RCX: 00007f186959c819 [ 69.997721][ T6194] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.997727][ T6194] RBP: 00007f186a524090 R08: 0000000000000000 R09: 0000000000000000 [ 69.997733][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.997739][ T6194] R13: 00007f1869816038 R14: 00007f1869815fa0 R15: 00007ffe2d1f74e8 [ 69.997752][ T6194] [ 70.063835][ T6192] Bluetooth: Invalid esc byte 0x17 [ 70.100251][ T13] Bluetooth: (null): Invalid header checksum [ 70.105902][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 70.105914][ T40] audit: type=1400 audit(5326445887.711:277): avc: denied { setopt } for pid=6196 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.119322][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 70.162843][ T40] audit: type=1400 audit(5326445887.771:278): avc: denied { name_bind } for pid=6200 comm="syz.1.52" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 70.178683][ T6201] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 70.192553][ T40] audit: type=1400 audit(5326445887.801:279): avc: denied { setopt } for pid=6202 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.202903][ T40] audit: type=1400 audit(5326445887.811:280): avc: denied { connect } for pid=6202 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.228578][ T40] audit: type=1400 audit(5326445887.841:281): avc: denied { create } for pid=6207 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.240314][ T40] audit: type=1400 audit(5326445887.851:282): avc: denied { getopt } for pid=6207 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.247649][ T40] audit: type=1400 audit(5326445887.851:283): avc: denied { write } for pid=6207 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 70.254592][ T40] audit: type=1400 audit(5326445887.851:284): avc: denied { setopt } for pid=6207 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.299269][ T40] audit: type=1400 audit(5326445887.911:285): avc: denied { write } for pid=6202 comm="syz.0.53" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.315755][ T40] audit: type=1400 audit(5326445887.911:286): avc: denied { ioctl } for pid=6202 comm="syz.0.53" path="socket:[11441]" dev="sockfs" ino=11441 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.359404][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.732073][ T6243] FAULT_INJECTION: forcing a failure. [ 70.732073][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 70.736487][ T6243] CPU: 0 UID: 0 PID: 6243 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(full) [ 70.736502][ T6243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.736508][ T6243] Call Trace: [ 70.736512][ T6243] [ 70.736516][ T6243] dump_stack_lvl+0x100/0x190 [ 70.736540][ T6243] should_fail_ex.cold+0x5/0xa [ 70.736556][ T6243] should_failslab+0xc2/0x120 [ 70.736569][ T6243] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 70.736585][ T6243] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 70.736605][ T6243] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 70.736626][ T6243] mmu_topup_memory_caches+0x25/0x170 [ 70.736640][ T6243] kvm_mmu_load+0xd6/0x23e0 [ 70.736651][ T6243] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 70.736667][ T6243] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 70.736684][ T6243] ? __pfx_kvm_mmu_load+0x10/0x10 [ 70.736694][ T6243] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 70.736712][ T6243] ? kvm_check_and_inject_events+0x961/0x10c0 [ 70.736724][ T6243] ? record_steal_time+0x410/0xbe0 [ 70.736742][ T6243] vcpu_run+0x39f4/0x5ca0 [ 70.736759][ T6243] ? __pfx_vcpu_run+0x10/0x10 [ 70.736782][ T6243] ? rcu_is_watching+0x12/0xc0 [ 70.736798][ T6243] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 70.736811][ T6243] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 70.736827][ T6243] kvm_vcpu_ioctl+0x730/0x1730 [ 70.736845][ T6243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.736861][ T6243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.736878][ T6243] ? do_vfs_ioctl+0x226/0x13e0 [ 70.736895][ T6243] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.736913][ T6243] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.736943][ T6243] ? __fget_files+0x215/0x3d0 [ 70.736959][ T6243] ? hook_file_ioctl_common+0x146/0x410 [ 70.736979][ T6243] ? selinux_file_ioctl+0x139/0x290 [ 70.736995][ T6243] ? selinux_file_ioctl+0xb4/0x290 [ 70.737012][ T6243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.737030][ T6243] __x64_sys_ioctl+0x18e/0x210 [ 70.737053][ T6243] do_syscall_64+0x106/0xf80 [ 70.737070][ T6243] ? clear_bhb_loop+0x40/0x90 [ 70.737086][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.737097][ T6243] RIP: 0033:0x7f87c939c819 [ 70.737107][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.737136][ T6243] RSP: 002b:00007f87ca338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.737148][ T6243] RAX: ffffffffffffffda RBX: 00007f87c9615fa0 RCX: 00007f87c939c819 [ 70.737155][ T6243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 70.737160][ T6243] RBP: 00007f87ca338090 R08: 0000000000000000 R09: 0000000000000000 [ 70.737170][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.737178][ T6243] R13: 00007f87c9616038 R14: 00007f87c9615fa0 R15: 00007ffc9887acb8 [ 70.737201][ T6243] [ 70.864005][ T5937] Bluetooth: hci1: command 0x0419 tx timeout [ 70.915024][ T6248] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 70.925239][ T6247] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 70.934097][ T5937] Bluetooth: hci0: command tx timeout [ 70.934242][ T5938] Bluetooth: hci2: command tx timeout [ 70.936355][ T5937] Bluetooth: hci3: command tx timeout [ 70.982589][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 70.989269][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 71.067758][ T6255] xt_l2tp: wrong L2TP version: 0 [ 71.366767][ T6278] FAULT_INJECTION: forcing a failure. [ 71.366767][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 71.370517][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) [ 71.370549][ T6278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.370556][ T6278] Call Trace: [ 71.370560][ T6278] [ 71.370564][ T6278] dump_stack_lvl+0x100/0x190 [ 71.370589][ T6278] should_fail_ex.cold+0x5/0xa [ 71.370605][ T6278] should_failslab+0xc2/0x120 [ 71.370617][ T6278] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 71.370635][ T6278] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 71.370657][ T6278] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 71.370678][ T6278] mmu_topup_memory_caches+0x25/0x170 [ 71.370692][ T6278] kvm_mmu_load+0xd6/0x23e0 [ 71.370703][ T6278] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 71.370720][ T6278] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 71.370737][ T6278] ? __pfx_kvm_mmu_load+0x10/0x10 [ 71.370748][ T6278] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 71.370765][ T6278] ? kvm_check_and_inject_events+0x961/0x10c0 [ 71.370777][ T6278] ? record_steal_time+0x410/0xbe0 [ 71.370794][ T6278] vcpu_run+0x39f4/0x5ca0 [ 71.370812][ T6278] ? __pfx_vcpu_run+0x10/0x10 [ 71.370829][ T6278] ? rcu_is_watching+0x12/0xc0 [ 71.370846][ T6278] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 71.370858][ T6278] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 71.370875][ T6278] kvm_vcpu_ioctl+0x730/0x1730 [ 71.370892][ T6278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.370908][ T6278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.370925][ T6278] ? do_vfs_ioctl+0x226/0x13e0 [ 71.370942][ T6278] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.370958][ T6278] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.370980][ T6278] ? __fget_files+0x215/0x3d0 [ 71.370991][ T6278] ? hook_file_ioctl_common+0x146/0x410 [ 71.371007][ T6278] ? selinux_file_ioctl+0x139/0x290 [ 71.371026][ T6278] ? selinux_file_ioctl+0xb4/0x290 [ 71.371042][ T6278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.371059][ T6278] __x64_sys_ioctl+0x18e/0x210 [ 71.371076][ T6278] do_syscall_64+0x106/0xf80 [ 71.371087][ T6278] ? clear_bhb_loop+0x40/0x90 [ 71.371100][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.371111][ T6278] RIP: 0033:0x7f87c939c819 [ 71.371121][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.371131][ T6278] RSP: 002b:00007f87ca338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.371141][ T6278] RAX: ffffffffffffffda RBX: 00007f87c9615fa0 RCX: 00007f87c939c819 [ 71.371147][ T6278] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.371154][ T6278] RBP: 00007f87ca338090 R08: 0000000000000000 R09: 0000000000000000 [ 71.371159][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.371165][ T6278] R13: 00007f87c9616038 R14: 00007f87c9615fa0 R15: 00007ffc9887acb8 [ 71.371178][ T6278] [ 71.610041][ T6286] ======================================================= [ 71.610041][ T6286] WARNING: The mand mount option has been deprecated and [ 71.610041][ T6286] and is ignored by this kernel. Remove the mand [ 71.610041][ T6286] option from the mount to silence this warning. [ 71.610041][ T6286] ======================================================= [ 71.647137][ T6286] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 71.731057][ T6294] xt_connbytes: Forcing CT accounting to be enabled [ 71.791575][ T6297] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.795078][ T6297] overlayfs: failed to set xattr on upper [ 71.798261][ T6297] overlayfs: ...falling back to redirect_dir=nofollow. [ 71.800902][ T6297] overlayfs: ...falling back to index=off. [ 71.803137][ T6297] overlayfs: ...falling back to uuid=null. [ 71.808564][ T6297] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 71.964028][ T830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.108256][ T6314] __nla_validate_parse: 2 callbacks suppressed [ 72.108271][ T6314] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.83'. [ 72.144157][ T830] usb 6-1: Using ep0 maxpacket: 32 [ 72.149768][ T830] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 72.152461][ T830] usb 6-1: config 0 has no interface number 0 [ 72.164449][ T830] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 72.167845][ T830] usb 6-1: config 0 interface 196 has no altsetting 0 [ 72.174840][ T830] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 72.178771][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.181472][ T830] usb 6-1: Product: syz [ 72.182856][ T830] usb 6-1: Manufacturer: syz [ 72.192997][ T6316] FAULT_INJECTION: forcing a failure. [ 72.192997][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 72.193980][ T830] usb 6-1: SerialNumber: syz [ 72.201968][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 72.201994][ T6316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.202005][ T6316] Call Trace: [ 72.202012][ T6316] [ 72.202019][ T6316] dump_stack_lvl+0x100/0x190 [ 72.202075][ T6316] should_fail_ex.cold+0x5/0xa [ 72.202101][ T6316] should_failslab+0xc2/0x120 [ 72.202122][ T6316] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 72.202148][ T6316] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 72.202182][ T6316] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 72.202215][ T6316] mmu_topup_memory_caches+0x25/0x170 [ 72.202237][ T6316] kvm_mmu_load+0xd6/0x23e0 [ 72.202256][ T6316] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 72.202281][ T6316] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 72.202310][ T6316] ? __pfx_kvm_mmu_load+0x10/0x10 [ 72.202329][ T6316] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 72.202386][ T6316] ? kvm_check_and_inject_events+0x961/0x10c0 [ 72.202407][ T6316] ? record_steal_time+0x410/0xbe0 [ 72.202437][ T6316] vcpu_run+0x39f4/0x5ca0 [ 72.202468][ T6316] ? __pfx_vcpu_run+0x10/0x10 [ 72.202500][ T6316] ? rcu_is_watching+0x12/0xc0 [ 72.202527][ T6316] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 72.202549][ T6316] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 72.202578][ T6316] kvm_vcpu_ioctl+0x730/0x1730 [ 72.202608][ T6316] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 72.202636][ T6316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.202664][ T6316] ? do_vfs_ioctl+0x226/0x13e0 [ 72.202698][ T6316] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.202726][ T6316] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.202764][ T6316] ? __fget_files+0x215/0x3d0 [ 72.202782][ T6316] ? hook_file_ioctl_common+0x146/0x410 [ 72.202809][ T6316] ? selinux_file_ioctl+0x139/0x290 [ 72.202833][ T6316] ? selinux_file_ioctl+0xb4/0x290 [ 72.202861][ T6316] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 72.202889][ T6316] __x64_sys_ioctl+0x18e/0x210 [ 72.202919][ T6316] do_syscall_64+0x106/0xf80 [ 72.202937][ T6316] ? clear_bhb_loop+0x40/0x90 [ 72.202960][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.202978][ T6316] RIP: 0033:0x7eff8779c819 [ 72.202994][ T6316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.203011][ T6316] RSP: 002b:00007eff8867a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.203029][ T6316] RAX: ffffffffffffffda RBX: 00007eff87a15fa0 RCX: 00007eff8779c819 [ 72.203041][ T6316] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 72.203051][ T6316] RBP: 00007eff8867a090 R08: 0000000000000000 R09: 0000000000000000 [ 72.203061][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.203071][ T830] usb 6-1: config 0 descriptor?? [ 72.203070][ T6316] R13: 00007eff87a16038 R14: 00007eff87a15fa0 R15: 00007ffd0ca6b428 [ 72.203095][ T6316] [ 72.263450][ T6321] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 72.326206][ T6292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.367812][ T6325] binder: 6324:6325 unknown command 0 [ 72.369935][ T6325] binder: 6324:6325 ioctl c0306201 200000000280 returned -22 [ 72.615355][ T3545] hid-generic 0004:0006:0002.0002: item fetching failed at offset 1/2 [ 72.618727][ T3545] hid-generic 0004:0006:0002.0002: probe with driver hid-generic failed with error -22 [ 72.779005][ T6347] bond1: entered promiscuous mode [ 72.780904][ T6347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.887871][ T6352] xt_policy: too many policy elements [ 72.934438][ T5937] Bluetooth: hci1: command 0x0419 tx timeout [ 72.945478][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.985016][ T6352] PID 6352 killed due to inadequate hugepage pool [ 73.106323][ T24] usb 7-1: config 0 has no interfaces? [ 73.111395][ T24] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 73.115781][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.119319][ T24] usb 7-1: Product: syz [ 73.120742][ T24] usb 7-1: Manufacturer: syz [ 73.122324][ T24] usb 7-1: SerialNumber: syz [ 73.140428][ T24] usb 7-1: config 0 descriptor?? [ 73.150218][ T830] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 73.165190][ T830] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 73.184069][ T830] usb 6-1: USB disconnect, device number 2 [ 73.233426][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.95'. [ 73.238029][ T6369] netlink: 'syz.3.95': attribute type 6 has an invalid length. [ 73.240668][ T6369] netlink: 'syz.3.95': attribute type 5 has an invalid length. [ 73.243150][ T6369] netlink: 'syz.3.95': attribute type 4 has an invalid length. [ 73.391527][ T6375] FAULT_INJECTION: forcing a failure. [ 73.391527][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 73.397608][ T6375] CPU: 2 UID: 0 PID: 6375 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(full) [ 73.397627][ T6375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.397639][ T6375] Call Trace: [ 73.397643][ T6375] [ 73.397648][ T6375] dump_stack_lvl+0x100/0x190 [ 73.397672][ T6375] should_fail_ex.cold+0x5/0xa [ 73.397688][ T6375] should_failslab+0xc2/0x120 [ 73.397700][ T6375] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 73.397717][ T6375] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.397737][ T6375] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 73.397758][ T6375] mmu_topup_memory_caches+0x25/0x170 [ 73.397773][ T6375] kvm_mmu_load+0xd6/0x23e0 [ 73.397785][ T6375] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 73.397801][ T6375] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.397818][ T6375] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.397829][ T6375] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 73.397846][ T6375] ? kvm_check_and_inject_events+0x961/0x10c0 [ 73.397859][ T6375] ? record_steal_time+0x410/0xbe0 [ 73.397876][ T6375] vcpu_run+0x39f4/0x5ca0 [ 73.397894][ T6375] ? __pfx_vcpu_run+0x10/0x10 [ 73.397911][ T6375] ? rcu_is_watching+0x12/0xc0 [ 73.397927][ T6375] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 73.397940][ T6375] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 73.397956][ T6375] kvm_vcpu_ioctl+0x730/0x1730 [ 73.397974][ T6375] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.397990][ T6375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.398007][ T6375] ? do_vfs_ioctl+0x226/0x13e0 [ 73.398029][ T6375] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.398046][ T6375] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.398069][ T6375] ? __fget_files+0x215/0x3d0 [ 73.398081][ T6375] ? hook_file_ioctl_common+0x146/0x410 [ 73.398096][ T6375] ? selinux_file_ioctl+0x139/0x290 [ 73.398112][ T6375] ? selinux_file_ioctl+0xb4/0x290 [ 73.398129][ T6375] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.398145][ T6375] __x64_sys_ioctl+0x18e/0x210 [ 73.398163][ T6375] do_syscall_64+0x106/0xf80 [ 73.398175][ T6375] ? clear_bhb_loop+0x40/0x90 [ 73.398188][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.398199][ T6375] RIP: 0033:0x7f186959c819 [ 73.398209][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.398219][ T6375] RSP: 002b:00007f186a524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.398230][ T6375] RAX: ffffffffffffffda RBX: 00007f1869815fa0 RCX: 00007f186959c819 [ 73.398237][ T6375] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.398243][ T6375] RBP: 00007f186a524090 R08: 0000000000000000 R09: 0000000000000000 [ 73.398249][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.398254][ T6375] R13: 00007f1869816038 R14: 00007f1869815fa0 R15: 00007ffe2d1f74e8 [ 73.398267][ T6375] [ 73.501557][ T6334] veth0_vlan: left promiscuous mode [ 73.505604][ T6334] veth0_vlan: entered promiscuous mode [ 73.525145][ T830] usb 7-1: USB disconnect, device number 4 [ 73.646661][ T6382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.99'. [ 73.657011][ T6385] process 'syz.3.100' launched '/dev/fd/3' with NULL argv: empty string added [ 73.708933][ T6387] syz.1.101 uses obsolete (PF_INET,SOCK_PACKET) [ 73.955101][ T6409] netlink: 'syz.3.108': attribute type 20 has an invalid length. [ 74.052207][ T6418] FAULT_INJECTION: forcing a failure. [ 74.052207][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 74.077433][ T6427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.078174][ T6418] CPU: 2 UID: 0 PID: 6418 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 74.078197][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.078206][ T6418] Call Trace: [ 74.078212][ T6418] [ 74.078218][ T6418] dump_stack_lvl+0x100/0x190 [ 74.078252][ T6418] should_fail_ex.cold+0x5/0xa [ 74.078268][ T6418] should_failslab+0xc2/0x120 [ 74.078281][ T6418] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 74.078297][ T6418] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 74.078317][ T6418] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 74.078364][ T6418] mmu_topup_memory_caches+0x25/0x170 [ 74.078387][ T6418] kvm_mmu_load+0xd6/0x23e0 [ 74.078399][ T6418] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 74.078414][ T6418] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 74.078431][ T6418] ? __pfx_kvm_mmu_load+0x10/0x10 [ 74.078442][ T6418] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 74.078460][ T6418] ? kvm_check_and_inject_events+0x961/0x10c0 [ 74.078473][ T6418] ? record_steal_time+0x410/0xbe0 [ 74.078490][ T6418] vcpu_run+0x39f4/0x5ca0 [ 74.078508][ T6418] ? __pfx_vcpu_run+0x10/0x10 [ 74.078525][ T6418] ? rcu_is_watching+0x12/0xc0 [ 74.078541][ T6418] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 74.078554][ T6418] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 74.078570][ T6418] kvm_vcpu_ioctl+0x730/0x1730 [ 74.078588][ T6418] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.078604][ T6418] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.078621][ T6418] ? do_vfs_ioctl+0x226/0x13e0 [ 74.078638][ T6418] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.078654][ T6418] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.078677][ T6418] ? __fget_files+0x215/0x3d0 [ 74.078689][ T6418] ? hook_file_ioctl_common+0x146/0x410 [ 74.078704][ T6418] ? selinux_file_ioctl+0x139/0x290 [ 74.078719][ T6418] ? selinux_file_ioctl+0xb4/0x290 [ 74.078740][ T6418] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.078759][ T6418] __x64_sys_ioctl+0x18e/0x210 [ 74.078777][ T6418] do_syscall_64+0x106/0xf80 [ 74.078788][ T6418] ? clear_bhb_loop+0x40/0x90 [ 74.078802][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.078813][ T6418] RIP: 0033:0x7f87c939c819 [ 74.078823][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.078832][ T6418] RSP: 002b:00007f87ca338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.078843][ T6418] RAX: ffffffffffffffda RBX: 00007f87c9615fa0 RCX: 00007f87c939c819 [ 74.078850][ T6418] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.078856][ T6418] RBP: 00007f87ca338090 R08: 0000000000000000 R09: 0000000000000000 [ 74.078861][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.078867][ T6418] R13: 00007f87c9616038 R14: 00007f87c9615fa0 R15: 00007ffc9887acb8 [ 74.078880][ T6418] [ 74.175844][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 74.309710][ T6443] netlink: 9 bytes leftover after parsing attributes in process `syz.3.118'. [ 74.319805][ T6443] netlink: 9 bytes leftover after parsing attributes in process `syz.3.118'. [ 74.594947][ T6454] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 74.817975][ T6464] ISOFS: Unable to identify CD-ROM format. [ 75.136973][ T6472] macvlan2: entered promiscuous mode [ 75.278235][ T6483] FAULT_INJECTION: forcing a failure. [ 75.278235][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 75.295200][ T6483] CPU: 1 UID: 0 PID: 6483 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT(full) [ 75.295221][ T6483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.295228][ T6483] Call Trace: [ 75.295232][ T6483] [ 75.295237][ T6483] dump_stack_lvl+0x100/0x190 [ 75.295264][ T6483] should_fail_ex.cold+0x5/0xa [ 75.295281][ T6483] should_failslab+0xc2/0x120 [ 75.295297][ T6483] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 75.295321][ T6483] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 75.295355][ T6483] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 75.295391][ T6483] mmu_topup_memory_caches+0x25/0x170 [ 75.295417][ T6483] kvm_mmu_load+0xd6/0x23e0 [ 75.295438][ T6483] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 75.295466][ T6483] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 75.295490][ T6483] ? __pfx_kvm_mmu_load+0x10/0x10 [ 75.295502][ T6483] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 75.295521][ T6483] ? kvm_check_and_inject_events+0x961/0x10c0 [ 75.295535][ T6483] ? record_steal_time+0x410/0xbe0 [ 75.295554][ T6483] vcpu_run+0x39f4/0x5ca0 [ 75.295575][ T6483] ? __pfx_vcpu_run+0x10/0x10 [ 75.295594][ T6483] ? rcu_is_watching+0x12/0xc0 [ 75.295613][ T6483] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 75.295627][ T6483] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 75.295645][ T6483] kvm_vcpu_ioctl+0x730/0x1730 [ 75.295665][ T6483] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.295689][ T6483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.295715][ T6483] ? do_vfs_ioctl+0x226/0x13e0 [ 75.295754][ T6483] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.295781][ T6483] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.295817][ T6483] ? __fget_files+0x215/0x3d0 [ 75.295836][ T6483] ? hook_file_ioctl_common+0x146/0x410 [ 75.295860][ T6483] ? selinux_file_ioctl+0x139/0x290 [ 75.295884][ T6483] ? selinux_file_ioctl+0xb4/0x290 [ 75.295911][ T6483] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.295941][ T6483] __x64_sys_ioctl+0x18e/0x210 [ 75.295964][ T6483] do_syscall_64+0x106/0xf80 [ 75.295979][ T6483] ? clear_bhb_loop+0x40/0x90 [ 75.295994][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.296006][ T6483] RIP: 0033:0x7f186959c819 [ 75.296018][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.296028][ T6483] RSP: 002b:00007f186a524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.296040][ T6483] RAX: ffffffffffffffda RBX: 00007f1869815fa0 RCX: 00007f186959c819 [ 75.296047][ T6483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.296054][ T6483] RBP: 00007f186a524090 R08: 0000000000000000 R09: 0000000000000000 [ 75.296060][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.296066][ T6483] R13: 00007f1869816038 R14: 00007f1869815fa0 R15: 00007ffe2d1f74e8 [ 75.296082][ T6483] [ 75.636451][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 75.636465][ T40] audit: type=1400 audit(5326445893.251:358): avc: denied { write } for pid=6488 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.846977][ T40] audit: type=1400 audit(5326445893.461:359): avc: denied { create } for pid=6503 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.855000][ T40] audit: type=1400 audit(5326445893.461:360): avc: denied { write } for pid=6503 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.861980][ T40] audit: type=1400 audit(5326445893.461:361): avc: denied { nlmsg_write } for pid=6503 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.872321][ T6506] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 76.029771][ T40] audit: type=1400 audit(5326445893.641:362): avc: denied { map } for pid=6513 comm="syz.3.137" path="/dev/dlm_plock" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.057674][ T6522] FAULT_INJECTION: forcing a failure. [ 76.057674][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 76.061956][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(full) [ 76.061974][ T6522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.061981][ T6522] Call Trace: [ 76.061986][ T6522] [ 76.061991][ T6522] dump_stack_lvl+0x100/0x190 [ 76.062019][ T6522] should_fail_ex.cold+0x5/0xa [ 76.062037][ T6522] should_failslab+0xc2/0x120 [ 76.062052][ T6522] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 76.062072][ T6522] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 76.062095][ T6522] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 76.062120][ T6522] mmu_topup_memory_caches+0x25/0x170 [ 76.062136][ T6522] kvm_mmu_load+0xd6/0x23e0 [ 76.062150][ T6522] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 76.062169][ T6522] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 76.062189][ T6522] ? __pfx_kvm_mmu_load+0x10/0x10 [ 76.062202][ T6522] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 76.062222][ T6522] ? kvm_check_and_inject_events+0x961/0x10c0 [ 76.062237][ T6522] ? record_steal_time+0x410/0xbe0 [ 76.062257][ T6522] vcpu_run+0x39f4/0x5ca0 [ 76.062278][ T6522] ? __pfx_vcpu_run+0x10/0x10 [ 76.062299][ T6522] ? rcu_is_watching+0x12/0xc0 [ 76.062318][ T6522] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 76.062359][ T6522] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 76.062387][ T6522] kvm_vcpu_ioctl+0x730/0x1730 [ 76.062410][ T6522] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.062429][ T6522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.062449][ T6522] ? do_vfs_ioctl+0x226/0x13e0 [ 76.062468][ T6522] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 76.062488][ T6522] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.062515][ T6522] ? __fget_files+0x215/0x3d0 [ 76.062528][ T6522] ? hook_file_ioctl_common+0x146/0x410 [ 76.062546][ T6522] ? selinux_file_ioctl+0x139/0x290 [ 76.062564][ T6522] ? selinux_file_ioctl+0xb4/0x290 [ 76.062584][ T6522] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.062603][ T6522] __x64_sys_ioctl+0x18e/0x210 [ 76.062625][ T6522] do_syscall_64+0x106/0xf80 [ 76.062697][ T6522] ? clear_bhb_loop+0x40/0x90 [ 76.062713][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.062726][ T6522] RIP: 0033:0x7f805d19c819 [ 76.062739][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.062751][ T6522] RSP: 002b:00007f805df8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.062763][ T6522] RAX: ffffffffffffffda RBX: 00007f805d415fa0 RCX: 00007f805d19c819 [ 76.062770][ T6522] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 76.062777][ T6522] RBP: 00007f805df8a090 R08: 0000000000000000 R09: 0000000000000000 [ 76.062784][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.062791][ T6522] R13: 00007f805d416038 R14: 00007f805d415fa0 R15: 00007fff61101428 [ 76.062807][ T6522] [ 76.217323][ T40] audit: type=1326 audit(5326445893.831:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6529 comm="syz.3.139" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f186959c819 code=0x0 [ 76.697885][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.701726][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.758262][ T40] audit: type=1400 audit(5326445894.371:364): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.806605][ T40] audit: type=1400 audit(5326445894.421:365): avc: denied { write } for pid=6538 comm="syz.0.142" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.814508][ T40] audit: type=1400 audit(5326445894.421:366): avc: denied { open } for pid=6538 comm="syz.0.142" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.821939][ T40] audit: type=1400 audit(5326445894.421:367): avc: denied { allowed } for pid=6538 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.895098][ T6541] input: syz0 as /devices/virtual/input/input6 [ 76.984998][ T6548] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 77.002797][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.013481][ T6548] vlan2: entered allmulticast mode [ 77.015558][ T6548] macsec0: entered allmulticast mode [ 77.017253][ T6548] veth1_macvtap: entered allmulticast mode [ 77.019764][ T6548] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 77.113270][ T6552] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 77.284024][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 77.373600][ T6563] FAULT_INJECTION: forcing a failure. [ 77.373600][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 77.379178][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) [ 77.379195][ T6563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.379202][ T6563] Call Trace: [ 77.379206][ T6563] [ 77.379210][ T6563] dump_stack_lvl+0x100/0x190 [ 77.379235][ T6563] should_fail_ex.cold+0x5/0xa [ 77.379251][ T6563] should_failslab+0xc2/0x120 [ 77.379265][ T6563] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 77.379282][ T6563] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 77.379303][ T6563] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 77.379324][ T6563] mmu_topup_memory_caches+0x25/0x170 [ 77.379338][ T6563] kvm_mmu_load+0xd6/0x23e0 [ 77.379350][ T6563] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 77.379366][ T6563] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 77.379384][ T6563] ? __pfx_kvm_mmu_load+0x10/0x10 [ 77.379395][ T6563] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 77.379414][ T6563] ? kvm_check_and_inject_events+0x961/0x10c0 [ 77.379427][ T6563] ? record_steal_time+0x410/0xbe0 [ 77.379445][ T6563] vcpu_run+0x39f4/0x5ca0 [ 77.379463][ T6563] ? __pfx_vcpu_run+0x10/0x10 [ 77.379481][ T6563] ? rcu_is_watching+0x12/0xc0 [ 77.379498][ T6563] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 77.379511][ T6563] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 77.379528][ T6563] kvm_vcpu_ioctl+0x730/0x1730 [ 77.379545][ T6563] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.379561][ T6563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.379578][ T6563] ? do_vfs_ioctl+0x226/0x13e0 [ 77.379595][ T6563] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.379611][ T6563] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.379634][ T6563] ? __fget_files+0x215/0x3d0 [ 77.379650][ T6563] ? hook_file_ioctl_common+0x146/0x410 [ 77.379665][ T6563] ? selinux_file_ioctl+0x139/0x290 [ 77.379681][ T6563] ? selinux_file_ioctl+0xb4/0x290 [ 77.379697][ T6563] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.379714][ T6563] __x64_sys_ioctl+0x18e/0x210 [ 77.379732][ T6563] do_syscall_64+0x106/0xf80 [ 77.379743][ T6563] ? clear_bhb_loop+0x40/0x90 [ 77.379756][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.379767][ T6563] RIP: 0033:0x7f186959c819 [ 77.379778][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.379788][ T6563] RSP: 002b:00007f186a524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.379799][ T6563] RAX: ffffffffffffffda RBX: 00007f1869815fa0 RCX: 00007f186959c819 [ 77.379805][ T6563] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.379811][ T6563] RBP: 00007f186a524090 R08: 0000000000000000 R09: 0000000000000000 [ 77.379817][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.379822][ T6563] R13: 00007f1869816038 R14: 00007f1869815fa0 R15: 00007ffe2d1f74e8 [ 77.379836][ T6563] [ 77.757988][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.3.151 [ 77.764632][ T6571] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 77.824469][ T6571] bond2: (slave bridge1): making interface the new active one [ 77.828234][ T6571] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 77.880435][ T6575] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.916099][ T6581] NILFS (nbd3): device size too small [ 78.074292][ T6587] Bluetooth: MGMT ver 1.23 [ 78.209220][ T6594] fuse: Bad value for 'fd' [ 78.659258][ T6604] sctp: Trying to GSO but underlying device doesn't support it. [ 78.730164][ T6606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6606 comm=syz.2.162 [ 78.740255][ T6606] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 78.867404][ T6587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.869743][ T6587] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.879075][ T6587] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.883024][ T6587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.885662][ T6587] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.897469][ T6587] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.909468][ T6587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.912279][ T6587] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.919117][ T6587] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.926726][ T6587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.928686][ T6587] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.935358][ T6587] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.935465][ T6608] xt_bpf: check failed: parse error [ 79.019583][ T6608] xt_CT: No such helper "snmp_trap" [ 79.183085][ T5937] Bluetooth: hci2: Invalid handle: 0x8e5a > 0x0eff [ 79.255813][ T6630] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 79.377240][ T6653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6653 comm=syz.3.174 [ 79.383083][ T6653] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 79.609397][ T6656] warning: `syz.1.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.748895][ T6669] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.213969][ T5939] Bluetooth: hci1: command 0x0419 tx timeout [ 80.494070][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 80.497830][ T6727] binder: 6725:6727 ioctl c0306201 2000000003c0 returned -14 [ 80.652689][ T6739] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.200'. [ 80.658278][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 80.708254][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 80.708275][ T40] audit: type=1400 audit(5326445898.321:412): avc: denied { getopt } for pid=6738 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 80.944179][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.944309][ T5937] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.944938][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.996868][ T6751] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.999530][ T6751] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 81.002694][ T6751] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.006915][ T6751] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 81.011384][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 81.310942][ T40] audit: type=1400 audit(5326445898.921:413): avc: denied { prog_run } for pid=6778 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 81.524598][ T40] audit: type=1400 audit(5326445899.141:414): avc: denied { create } for pid=6784 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.533540][ T40] audit: type=1400 audit(5326445899.141:415): avc: denied { write } for pid=6784 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.542769][ T6785] binder: 6784:6785 ioctl c058565d 200000000200 returned -22 [ 81.546297][ T40] audit: type=1400 audit(5326445899.151:416): avc: denied { read } for pid=6784 comm="syz.3.212" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 81.556131][ T40] audit: type=1400 audit(5326445899.151:417): avc: denied { ioctl } for pid=6784 comm="syz.3.212" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 81.639318][ T40] audit: type=1400 audit(5326445899.251:418): avc: denied { write } for pid=6791 comm="syz.3.214" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 81.644145][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.653438][ T40] audit: type=1400 audit(5326445899.261:419): avc: denied { setopt } for pid=6791 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.662999][ T40] audit: type=1400 audit(5326445899.261:420): avc: denied { read } for pid=6791 comm="syz.3.214" path="socket:[13249]" dev="sockfs" ino=13249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.824493][ T29] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 81.828196][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.830951][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.832814][ T40] audit: type=1400 audit(5326445899.441:421): avc: denied { write } for pid=6796 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.841295][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.856632][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.859668][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.863568][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.884819][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.887948][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.891305][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.892675][ T6799] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.896022][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.896349][ T6799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.899450][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.913966][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.920675][ T6799] vhci_hcd vhci_hcd.0: Device attached [ 81.924462][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.927390][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.931431][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.944577][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.947458][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.951375][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.964924][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.968000][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.971359][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.974558][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.977614][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.981015][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.997844][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 82.000819][ T29] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 82.003563][ T29] usb 6-1: Product: syz [ 82.013943][ T29] usb 6-1: Manufacturer: syz [ 82.015624][ T29] usb 6-1: SerialNumber: syz [ 82.018762][ T29] usb 6-1: config 0 descriptor?? [ 82.035261][ T29] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 82.214093][ T830] usb 38-1: SetAddress Request (2) to port 0 [ 82.216334][ T830] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 82.294065][ T5937] Bluetooth: hci1: command 0x0419 tx timeout [ 82.333201][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.338533][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.543801][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.554340][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.812049][ T6818] fuseblk: Unknown parameter 'fdi' [ 83.014493][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.014557][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.014591][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.242136][ T6830] sp0: Synchronizing with TNC [ 83.426519][ T6802] vhci_hcd: connection reset by peer [ 83.431118][ T13] vhci_hcd vhci_hcd.0: stop threads [ 83.433822][ T13] vhci_hcd vhci_hcd.0: release socket [ 83.449879][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 83.628188][ T5939] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 83.683163][ T6847] futex_wake_op: syz.2.231 tries to shift op by 32; fix this program [ 83.854662][ T6858] input: syz1 as /devices/virtual/input/input7 [ 84.294125][ C1] usb 6-1: yurex_control_callback - control failed: -2 [ 84.299079][ T6004] usb 6-1: USB disconnect, device number 3 [ 84.316801][ T6004] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 84.376006][ T5939] Bluetooth: hci1: command 0x0419 tx timeout [ 84.404253][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 84.446275][ T6874] 8021q: VLANs not supported on lo [ 84.449552][ T6874] 8021q: VLANs not supported on lo [ 84.451308][ T6874] 8021q: VLANs not supported on lo [ 84.453191][ T6874] 8021q: VLANs not supported on lo [ 84.456885][ T6874] 8021q: VLANs not supported on lo [ 84.458923][ T6874] 8021q: VLANs not supported on lo [ 84.460744][ T6874] 8021q: VLANs not supported on lo [ 84.462442][ T6874] 8021q: VLANs not supported on lo [ 84.464552][ T6874] 8021q: VLANs not supported on lo [ 84.466256][ T6874] 8021q: VLANs not supported on lo [ 84.467993][ T6874] 8021q: VLANs not supported on lo [ 84.469703][ T6874] 8021q: VLANs not supported on lo [ 84.471477][ T6874] 8021q: VLANs not supported on lo [ 84.473473][ T6874] 8021q: VLANs not supported on lo [ 84.476285][ T6874] 8021q: VLANs not supported on lo [ 84.478096][ T6874] 8021q: VLANs not supported on lo [ 84.479832][ T6874] 8021q: VLANs not supported on lo [ 84.481502][ T6874] 8021q: VLANs not supported on lo [ 84.483263][ T6874] 8021q: VLANs not supported on lo [ 84.485260][ T6874] 8021q: VLANs not supported on lo [ 84.487010][ T6874] 8021q: VLANs not supported on lo [ 84.488744][ T6874] 8021q: VLANs not supported on lo [ 84.490517][ T6874] 8021q: VLANs not supported on lo [ 84.492388][ T6874] 8021q: VLANs not supported on lo [ 84.550788][ T6881] loop6: detected capacity change from 0 to 7 [ 84.560471][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.563822][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.568922][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.572370][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.576547][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.580171][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.583490][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.586741][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.589690][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.593683][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.596743][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.599818][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.602520][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.605920][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.608623][ T6081] ldm_validate_partition_table(): Disk read failed. [ 84.611830][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.616006][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.622548][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.626372][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.631266][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.634574][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.637422][ T6081] Dev loop6: unable to read RDB block 0 [ 84.638334][ T6882] debugfs: Bad value for 'mode' [ 84.639485][ T6081] loop6: unable to read partition table [ 84.642612][ T6081] loop6: partition table beyond EOD, truncated [ 84.650175][ T6881] ldm_validate_partition_table(): Disk read failed. [ 84.652987][ T6881] Dev loop6: unable to read RDB block 0 [ 84.655650][ T6881] loop6: unable to read partition table [ 84.658136][ T6881] loop6: partition table beyond EOD, truncated [ 84.660765][ T6881] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 84.747266][ T6884] tun0: tun_chr_ioctl cmd 1074025675 [ 84.749199][ T6884] tun0: persist enabled [ 84.750769][ T6884] tun0: tun_chr_ioctl cmd 1074025675 [ 84.752511][ T6884] tun0: persist enabled [ 84.821850][ T6889] xt_hashlimit: size too large, truncated to 1048576 [ 85.104047][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.104959][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.141782][ T6910] netlink: 'syz.0.250': attribute type 7 has an invalid length. [ 85.146562][ T6910] netlink: 'syz.0.250': attribute type 7 has an invalid length. [ 85.174044][ T5657] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.325595][ T5657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.328970][ T5657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.331927][ T5657] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.353980][ T5657] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.356922][ T5657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.362687][ T5657] usb 6-1: config 0 descriptor?? [ 85.673647][ T6916] input: syz0 as /devices/virtual/input/input8 [ 85.796864][ T6918] gfs2: error -5 reading superblock qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x11d000) [ 85.959160][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 85.959180][ T40] audit: type=1400 audit(5326445903.571:440): avc: denied { nlmsg_read } for pid=6921 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.959184][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 85.959716][ T6922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2561 sclass=netlink_tcpdiag_socket pid=6922 comm=syz.3.254 [ 85.984163][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 85.987045][ T1115] ata1: failed to read log page 10h (errno=-5) [ 85.991243][ T1115] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 85.994948][ T1115] ata1.00: irq_stat 0x40000000 [ 85.997055][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.999697][ T1115] ata1.00: cmd 61/c0:00:06:14:08/04:00:00:00:00/40 tag 0 ncq dma 622592 out [ 85.999697][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 86.007253][ T1115] ata1.00: status: { DRDY } [ 86.009254][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 86.011801][ T1115] ata1.00: cmd 61/e8:f0:1e:0b:08/08:00:00:00:00/40 tag 30 ncq dma 1167360 ou [ 86.011801][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 86.033863][ T1115] ata1.00: status: { DRDY } [ 86.044836][ T40] audit: type=1400 audit(5326445903.651:441): avc: denied { ioctl } for pid=6923 comm="syz.0.255" path="socket:[14181]" dev="sockfs" ino=14181 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.055937][ T1115] ata1.00: configured for UDMA/100 [ 86.058629][ T40] audit: type=1400 audit(5326445903.671:442): avc: denied { ioctl } for pid=6923 comm="syz.0.255" path="socket:[14182]" dev="sockfs" ino=14182 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 86.058645][ T1115] ata1: EH complete [ 86.099240][ T40] audit: type=1400 audit(5326445903.711:443): avc: denied { write } for pid=6925 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.107936][ T40] audit: type=1400 audit(5326445903.711:444): avc: denied { accept } for pid=6925 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.411240][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.439802][ T40] audit: type=1400 audit(5326445904.051:445): avc: denied { execute } for pid=6938 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 86.447412][ T40] audit: type=1400 audit(5326445904.051:446): avc: denied { execute_no_trans } for pid=6938 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 86.540064][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.545673][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.550255][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.559608][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.566254][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.569995][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.618125][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 86.624197][ T6949] netlink: 'syz.3.262': attribute type 2 has an invalid length. [ 86.628468][ T6949] netlink: 144 bytes leftover after parsing attributes in process `syz.3.262'. [ 86.669787][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.704290][ T6953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.263'. [ 86.748104][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.756775][ T6957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54544 sclass=netlink_route_socket pid=6957 comm=syz.0.264 [ 86.811985][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 86.828844][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'. [ 86.873141][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 86.877758][ T6962] netlink: 2 bytes leftover after parsing attributes in process `syz.0.265'. [ 86.890075][ T6962] program syz.0.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.942756][ T1025] cfg80211: failed to load regulatory.db [ 86.996024][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.998579][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.000973][ T6941] bridge_slave_0: entered allmulticast mode [ 87.003762][ T6941] bridge_slave_0: entered promiscuous mode [ 87.026697][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.029392][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.031963][ T6941] bridge_slave_1: entered allmulticast mode [ 87.035508][ T6941] bridge_slave_1: entered promiscuous mode [ 87.061715][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.072209][ T13] bridge_slave_1: left allmulticast mode [ 87.074449][ T13] bridge_slave_1: left promiscuous mode [ 87.078487][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.085064][ T13] bridge_slave_0: left promiscuous mode [ 87.087561][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.099905][ T40] audit: type=1400 audit(5326445904.711:447): avc: denied { listen } for pid=6971 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.107126][ T40] audit: type=1400 audit(5326445904.711:448): avc: denied { accept } for pid=6971 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.113616][ T40] audit: type=1400 audit(5326445904.721:449): avc: denied { mount } for pid=6971 comm="syz.0.268" name="/" dev="configfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.254358][ T830] usb 38-1: device descriptor read/8, error -110 [ 87.269883][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.275065][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.278886][ T13] bond0 (unregistering): Released all slaves [ 87.286945][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.322973][ T6941] team0: Port device team_slave_0 added [ 87.328430][ T6941] team0: Port device team_slave_1 added [ 87.366740][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.369259][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.379208][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.383627][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.387020][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.396156][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.451039][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 87.457156][ T6941] hsr_slave_0: entered promiscuous mode [ 87.459608][ T6981] omfs: Invalid superblock (0) [ 87.459920][ T6941] hsr_slave_1: entered promiscuous mode [ 87.466176][ T6941] debugfs: 'hsr0' already exists in 'hsr' [ 87.468075][ T6941] Cannot create hsr debugfs directory [ 87.675251][ T830] usb usb38-port1: attempt power cycle [ 87.847889][ T13] hsr_slave_0: left promiscuous mode [ 87.865486][ T13] hsr_slave_1: left promiscuous mode [ 87.868211][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.871670][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.885199][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.893194][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.909357][ T13] veth1_macvtap: left promiscuous mode [ 87.913368][ T13] veth0_macvtap: left promiscuous mode [ 88.091240][ T7038] tmpfs: Bad value for 'huge' [ 88.094065][ T13] team0 (unregistering): Port device team_slave_1 removed [ 88.112312][ T13] team0 (unregistering): Port device team_slave_0 removed [ 88.156028][ T7040] Failed to get privilege flags for destination (handle=0x2:0x80) [ 88.245008][ T830] usb usb38-port1: unable to enumerate USB device [ 88.266532][ T6941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.278878][ T6941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.285517][ T6941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.286232][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.282'. [ 88.318798][ T6941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.338480][ T7044] syzkaller1: entered promiscuous mode [ 88.341001][ T7044] syzkaller1: entered allmulticast mode [ 88.381651][ T5657] usbhid 6-1:0.0: can't add hid device: -71 [ 88.383771][ T5657] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 88.396168][ T5657] usb 6-1: USB disconnect, device number 4 [ 88.434358][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.447293][ T6941] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.456954][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.459833][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.487895][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.491006][ T7011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.498172][ T7069] xt_hashlimit: size too large, truncated to 1048576 [ 88.591932][ T6941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.614084][ T5937] Bluetooth: hci0: command tx timeout [ 88.789084][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.829097][ T7089] netlink: 'syz.0.288': attribute type 62 has an invalid length. [ 89.082445][ T6941] veth0_vlan: entered promiscuous mode [ 89.116150][ T6941] veth1_vlan: entered promiscuous mode [ 89.193747][ T7116] EXT4-fs (nbd1): unable to read superblock [ 89.206641][ T7121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.343841][ T6941] veth0_macvtap: entered promiscuous mode [ 89.358817][ T6941] veth1_macvtap: entered promiscuous mode [ 89.369342][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.378238][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.388138][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.393659][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400948][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403751][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.449568][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.452781][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.480301][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.482891][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.488511][ T7141] __nla_validate_parse: 2 callbacks suppressed [ 89.488529][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 89.566738][ T7154] sctp: [Deprecated]: syz.1.306 (pid 7154) Use of int in maxseg socket option. [ 89.566738][ T7154] Use struct sctp_assoc_value instead [ 89.742424][ T7184] veth1_vlan: entered allmulticast mode [ 89.754636][ T7187] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 90.074031][ T6019] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.224812][ T6019] usb 5-1: Using ep0 maxpacket: 8 [ 90.229244][ T6019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.234213][ T6019] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.238248][ T6019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.248721][ T6019] usb 5-1: config 0 descriptor?? [ 90.459936][ T6019] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 90.704187][ T5937] Bluetooth: hci0: command tx timeout [ 91.739971][ T6018] usb 5-1: USB disconnect, device number 2 [ 92.784329][ T5937] Bluetooth: hci0: command tx timeout [ 94.864113][ T5937] Bluetooth: hci0: command tx timeout [ 109.348387][ T7240] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.349133][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 109.349150][ T40] audit: type=1400 audit(5326445926.961:470): avc: denied { append } for pid=7238 comm="syz.0.317" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.351130][ T7240] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 109.353784][ T40] audit: type=1400 audit(5326445926.961:471): avc: denied { ioctl } for pid=7238 comm="syz.0.317" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.362154][ T7240] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 109.371727][ T40] audit: type=1804 audit(5326445926.981:472): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.317" name="/newroot/93/file0" dev="tmpfs" ino=502 res=1 errno=0 [ 109.375228][ T7241] openvswitch: netlink: Key 6 has unexpected len 107 expected 2 [ 109.378142][ T40] audit: type=1400 audit(5326445926.981:473): avc: denied { create } for pid=7242 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.385461][ T7240] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 109.388619][ T40] audit: type=1400 audit(5326445926.991:474): avc: denied { setopt } for pid=7242 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.408771][ T40] audit: type=1400 audit(5326445927.011:475): avc: denied { write } for pid=7242 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.419108][ T40] audit: type=1400 audit(5326445927.011:476): avc: denied { ioctl } for pid=7242 comm="syz.1.318" path="socket:[18095]" dev="sockfs" ino=18095 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.430313][ T40] audit: type=1400 audit(5326445927.011:477): avc: denied { getopt } for pid=7242 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.477921][ T40] audit: type=1400 audit(5326445927.091:478): avc: denied { ioctl } for pid=7254 comm="syz.1.324" path="socket:[19489]" dev="sockfs" ino=19489 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.696099][ T40] audit: type=1400 audit(5326445927.311:479): avc: denied { write } for pid=7269 comm="syz.1.329" name="kcm" dev="proc" ino=4026533060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.785102][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 109.958980][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 109.967549][ T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.974414][ T9] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.979354][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 109.994510][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 109.997692][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.014531][ T9] usb 8-1: config 0 descriptor?? [ 110.334729][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 110.345344][ T7326] netlink: 'syz.0.336': attribute type 9 has an invalid length. [ 110.362159][ T7326] misc userio: Begin command sent, but we're already running [ 110.485520][ T24] usb 9-1: config 0 has no interfaces? [ 110.487920][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.492080][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.497252][ T24] usb 9-1: config 0 descriptor?? [ 110.641000][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 110.643038][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 110.652690][ T9] usb 8-1: USB disconnect, device number 2 [ 110.709755][ T6004] usb 9-1: USB disconnect, device number 2 [ 110.836675][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 110.868195][ T9] libceph: connect (1)[c::]:6789 error -101 [ 110.871744][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 110.899555][ T7334] ceph: No mds server is up or the cluster is laggy [ 111.132589][ T7358] ipvlan4: entered allmulticast mode [ 111.134643][ T7358] batadv_slave_1: entered allmulticast mode [ 111.338475][ T7371] 9pnet_virtio: no channels available for device syz [ 111.522728][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 111.592951][ T7389] vivid-003: ================= START STATUS ================= [ 111.597570][ T7389] vivid-003: Radio HW Seek Mode: Bounded [ 111.599690][ T7389] vivid-003: Radio Programmable HW Seek: false [ 111.603454][ T7389] vivid-003: RDS Rx I/O Mode: Block I/O [ 111.612542][ T7389] vivid-003: Generate RBDS Instead of RDS: false [ 111.614958][ T7389] vivid-003: RDS Reception: true [ 111.616609][ T7389] vivid-003: RDS Program Type: 0 inactive [ 111.618548][ T7389] vivid-003: RDS PS Name: inactive [ 111.620247][ T7389] vivid-003: RDS Radio Text: inactive [ 111.622021][ T7389] vivid-003: RDS Traffic Announcement: false inactive [ 111.626117][ T7389] vivid-003: RDS Traffic Program: false inactive [ 111.628535][ T7389] vivid-003: RDS Music: false inactive [ 111.630613][ T7389] vivid-003: ================== END STATUS ================== [ 111.731496][ T7400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 111.944871][ T7416] netlink: 64 bytes leftover after parsing attributes in process `syz.0.366'. [ 111.952602][ T7416] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 111.952602][ T7416] program syz.0.366 not setting count and/or reply_len properly [ 112.065365][ T7424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.106037][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 112.126350][ T7430] xt_l2tp: v2 doesn't support IP mode [ 112.348630][ T7449] FAT-fs (nullb0): bogus number of reserved sectors [ 112.354013][ T7449] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 112.452523][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 112.457524][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 112.502829][ T7463] Bluetooth: MGMT ver 1.23 [ 112.510910][ T7463] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 112.513735][ T7463] netlink: 96 bytes leftover after parsing attributes in process `syz.1.381'. [ 112.518849][ T7463] netlink: 658 bytes leftover after parsing attributes in process `syz.1.381'. [ 112.522092][ T7463] netlink: 1 bytes leftover after parsing attributes in process `syz.1.381'. [ 112.545130][ T7465] ip6gre1: entered promiscuous mode [ 112.548308][ T7465] ip6gre1: entered allmulticast mode [ 112.557607][ T7465] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.690191][ T7474] tmpfs: Unknown parameter '' [ 112.789957][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 113.544592][ T7540] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.576996][ T7012] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.580873][ T7012] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.604277][ T6018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.754468][ T3545] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.930598][ T3545] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 113.938189][ T3545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.943035][ T3545] usb 5-1: Product: syz [ 113.946270][ T3545] usb 5-1: Manufacturer: syz [ 113.948428][ T3545] usb 5-1: SerialNumber: syz [ 113.952787][ T7564] tipc: Started in network mode [ 113.957707][ T7564] tipc: Node identity ac14140f, cluster identity 4711 [ 113.961338][ T7564] tipc: New replicast peer: 255.255.255.255 [ 113.967362][ T7564] tipc: Enabled bearer , priority 10 [ 113.968930][ T3545] usb 5-1: config 0 descriptor?? [ 113.979092][ T7564] program syz.3.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.182842][ T6018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.187574][ T6004] usb 5-1: USB disconnect, device number 3 [ 114.228527][ T7577] pimreg: entered allmulticast mode [ 114.265654][ T7580] pimreg: left allmulticast mode [ 114.294261][ T6018] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.457243][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 114.457265][ T40] audit: type=1400 audit(5326445932.071:525): avc: denied { unmount } for pid=7600 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.498435][ T7601] bond1: Unable to set down delay as MII monitoring is disabled [ 114.507287][ T7601] bond1 (unregistering): Released all slaves [ 114.648210][ T7613] netem: change failed [ 114.717330][ T40] audit: type=1400 audit(5326445932.331:526): avc: denied { create } for pid=7604 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.734205][ T40] audit: type=1400 audit(5326445932.331:527): avc: denied { getopt } for pid=7604 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.747909][ T40] audit: type=1400 audit(5326445932.331:528): avc: denied { map } for pid=7604 comm="syz.1.430" path="socket:[20043]" dev="sockfs" ino=20043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.759452][ T40] audit: type=1400 audit(5326445932.331:529): avc: denied { read } for pid=7604 comm="syz.1.430" path="socket:[20043]" dev="sockfs" ino=20043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.774778][ T40] audit: type=1400 audit(5326445932.341:530): avc: denied { setopt } for pid=7617 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.819162][ T40] audit: type=1400 audit(5326445932.431:531): avc: denied { ioctl } for pid=7624 comm="syz.1.438" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.064163][ T7623] nbd0: detected capacity change from 0 to 127 [ 115.069096][ T5937] block nbd0: Receive control failed (result -32) [ 115.070570][ T5938] block nbd0: Receive control failed (result -32) [ 115.072954][ T7258] block nbd0: Send control failed (result -32) [ 115.076177][ T5939] block nbd0: Receive control failed (result -32) [ 115.079241][ T7258] block nbd0: Request send failed, requeueing [ 115.089231][ T35] block nbd0: Dead connection, failed to find a fallback [ 115.092288][ T35] block nbd0: shutting down sockets [ 115.095396][ T35] blk_print_req_error: 26 callbacks suppressed [ 115.095417][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.096702][ T54] tipc: Node number set to 2886997007 [ 115.099256][ T35] buffer_io_error: 26 callbacks suppressed [ 115.099267][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.111113][ T7258] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.116460][ T7258] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.120121][ T7258] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.123660][ T7258] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.127147][ T7258] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.130764][ T7258] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.134069][ T7258] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.137879][ T7258] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.141056][ T7258] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.144955][ T7258] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.148653][ T7258] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.152751][ T7258] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.156562][ T7258] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.160725][ T7258] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.164024][ T7258] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.167324][ T7258] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.170406][ T7258] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.171762][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.174026][ T7258] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.177908][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.181451][ T7258] ldm_validate_partition_table(): Disk read failed. [ 115.183033][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.186514][ T7258] Dev nbd0: unable to read RDB block 0 [ 115.188966][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.190677][ T7258] nbd0: unable to read partition table [ 115.193550][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.202912][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.206318][ T7258] ldm_validate_partition_table(): Disk read failed. [ 115.207591][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.210032][ T7258] Dev nbd0: unable to read RDB block 0 [ 115.213198][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.216352][ T7258] nbd0: unable to read partition table [ 115.219586][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.224572][ T6004] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.236407][ T6004] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [sy] on syz0 [ 115.322688][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.326603][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.341971][ T7644] fido_id[7644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.396104][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.401474][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.416834][ T7648] netlink: 'syz.4.447': attribute type 4 has an invalid length. [ 115.469685][ T7637] bond1: left promiscuous mode [ 115.568156][ T7637] ip6gre1: left promiscuous mode [ 115.615780][ T7646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.636745][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.643786][ T7647] bond1: (slave bond0): making interface the new active one [ 115.648665][ C3] Illegal XDP return value 16128 on prog (id 35) dev veth0_to_bond, expect packet loss! [ 115.651903][ T7647] bond1: (slave bond0): Enslaving as an active interface with an up link [ 115.657622][ T7648] .`: renamed from bond0 (while UP) [ 115.662970][ T7007] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.675915][ T7007] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.679136][ T7007] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.682108][ T7007] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.725916][ T7007] bond1: (slave .`): link status definitely down, disabling slave [ 115.731695][ T7007] bond1: now running without any active interface! [ 115.798113][ T40] audit: type=1400 audit(5326445933.411:532): avc: denied { block_suspend } for pid=7663 comm="syz.4.450" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.913827][ T40] audit: type=1400 audit(5326445933.521:533): avc: denied { setattr } for pid=7671 comm="syz.4.454" name="" dev="pipefs" ino=20718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 116.125728][ T7679] __nla_validate_parse: 14 callbacks suppressed [ 116.125749][ T7679] netlink: 72 bytes leftover after parsing attributes in process `syz.1.457'. [ 116.222633][ T40] audit: type=1400 audit(5326445933.831:534): avc: denied { read } for pid=7686 comm="syz.3.460" path="socket:[20735]" dev="sockfs" ino=20735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.517424][ T7699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.463'. [ 116.644045][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 116.795899][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 116.799879][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.803384][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.823251][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.826323][ T24] pvrusb2: ********** [ 116.828458][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.832466][ T24] pvrusb2: Important functionality might not be entirely working. [ 116.836335][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.841178][ T24] pvrusb2: ********** [ 117.019796][ T2487] pvrusb2: Invalid write control endpoint [ 117.055151][ T2487] pvrusb2: Invalid write control endpoint [ 117.057985][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 117.061750][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 117.064898][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.069186][ T2487] pvrusb2: Device being rendered inoperable [ 117.075310][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 117.080364][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 117.088122][ T2487] pvrusb2: Attached sub-driver cx25840 [ 117.091640][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.098979][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.244458][ T3545] usb 6-1: USB disconnect, device number 5 [ 117.337762][ T5938] Bluetooth: hci1: Invalid handle: 0x8e5a > 0x0eff [ 117.747970][ T7755] binder: 7754:7755 ioctl ae80 0 returned -22 [ 117.786125][ T7763] ip6t_srh: unknown srh invflags 4000 [ 117.855815][ T7773] netlink: 'syz.0.488': attribute type 39 has an invalid length. [ 117.917871][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.057983][ T7786] overlayfs: failed to clone upperpath [ 118.067651][ T7786] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 118.071611][ T7786] overlayfs: missing 'lowerdir' [ 118.085084][ T7788] can0: slcan on ttyS3. [ 118.214383][ T7788] can0 (unregistered): slcan off ttyS3. [ 118.277676][ T7797] trusted_key: syz.3.497 sent an empty control message without MSG_MORE. [ 118.712408][ T7817] netlink: 76 bytes leftover after parsing attributes in process `syz.3.502'. [ 118.935300][ T7846] capability: warning: `syz.0.510' uses deprecated v2 capabilities in a way that may be insecure [ 119.051069][ T7853] netdevsim netdevsim4: Direct firmware load for - failed with error -2 [ 119.057808][ T7853] netdevsim netdevsim4: Falling back to sysfs fallback for: - [ 119.646980][ T7862] IPVS: length: 193 != 8 [ 119.663779][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 119.663798][ T40] audit: type=1400 audit(5326445937.261:551): avc: denied { write } for pid=7861 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.672274][ T40] audit: type=1400 audit(5326445937.261:552): avc: denied { setcurrent } for pid=7863 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.751189][ T40] audit: type=1400 audit(5326445937.361:553): avc: denied { execute } for pid=7870 comm="syz.3.517" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 119.770223][ T7872] netlink: 44 bytes leftover after parsing attributes in process `syz.3.517'. [ 119.879525][ T7882] veth1_macvtap: left promiscuous mode [ 119.881612][ T7882] macsec0: entered promiscuous mode [ 119.884686][ T40] audit: type=1400 audit(5326445937.501:554): avc: denied { getopt } for pid=7879 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.896228][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 119.922908][ T7882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7882 comm=syz.1.521 [ 120.012049][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 120.480588][ T7864] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 120.615981][ T7918] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1im]7(a H] [ 120.705858][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 120.762426][ T40] audit: type=1400 audit(5326445938.371:555): avc: denied { create } for pid=7928 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 120.775100][ T40] audit: type=1400 audit(5326445938.371:556): avc: denied { setattr } for pid=7928 comm="syz.4.536" name="[io_uring]" dev="anon_inodefs" ino=21895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.793468][ T40] audit: type=1400 audit(5326445938.381:557): avc: denied { create } for pid=7928 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 120.810189][ T40] audit: type=1400 audit(5326445938.381:558): avc: denied { ioctl } for pid=7928 comm="syz.4.536" path="socket:[21898]" dev="sockfs" ino=21898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.744011][ T5938] Bluetooth: hci0: command 0x0c20 tx timeout [ 122.060156][ T40] audit: type=1400 audit(5326445939.661:559): avc: denied { create } for pid=7966 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.075555][ T40] audit: type=1400 audit(5326445939.681:560): avc: denied { ioctl } for pid=7966 comm="syz.4.546" path="socket:[19376]" dev="sockfs" ino=19376 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.317908][ T7978] cgroup: release_agent respecified [ 122.360190][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 123.820641][ T7989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.555'. [ 124.532366][ T7997] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 124.542724][ T7997] bond0 (unregistering): Released all slaves [ 124.629031][ T8001] evm: overlay not supported [ 124.748260][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 124.752645][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 125.019567][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 125.020633][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 125.020650][ T40] audit: type=1400 audit(5326445942.631:567): avc: denied { execute } for pid=8023 comm="syz.4.566" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.182295][ T8031] bond0: entered promiscuous mode [ 125.184371][ T8031] bond_slave_0: entered promiscuous mode [ 125.187575][ T8031] bond_slave_1: entered promiscuous mode [ 125.195217][ T8031] batadv0: entered promiscuous mode [ 125.199616][ T8031] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 125.207128][ T8031] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 125.215619][ T8031] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 125.225289][ T8031] bond0: left promiscuous mode [ 125.230797][ T8031] bond_slave_0: left promiscuous mode [ 125.236779][ T8031] bond_slave_1: left promiscuous mode [ 125.247437][ T8031] batadv0: left promiscuous mode [ 125.436747][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 125.439872][ T8047] netlink: 5 bytes leftover after parsing attributes in process `syz.4.575'. [ 125.485225][ T8049] netlink: 72 bytes leftover after parsing attributes in process `syz.3.574'. [ 125.799502][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 126.110775][ T8074] sctp: [Deprecated]: syz.4.582 (pid 8074) Use of int in maxseg socket option. [ 126.110775][ T8074] Use struct sctp_assoc_value instead [ 126.370348][ T5938] block nbd3: Receive control failed (result -107) [ 126.374393][ T5938] [ 126.375276][ T5938] ====================================================== [ 126.377977][ T5938] WARNING: possible circular locking dependency detected [ 126.380411][ T5938] syzkaller #0 Tainted: G L [ 126.382540][ T5938] ------------------------------------------------------ [ 126.385224][ T5938] kworker/u33:3/5938 is trying to acquire lock: [ 126.387858][ T5938] ffff88806075a8a0 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 126.391406][ T5938] [ 126.391406][ T5938] but task is already holding lock: [ 126.393746][ T5938] ffff888064927470 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 126.396711][ T5938] [ 126.396711][ T5938] which lock already depends on the new lock. [ 126.396711][ T5938] [ 126.399932][ T5938] [ 126.399932][ T5938] the existing dependency chain (in reverse order) is: [ 126.403172][ T5938] [ 126.403172][ T5938] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 126.405850][ T5938] __mutex_lock+0x1a2/0x1b90 [ 126.407593][ T5938] nbd_queue_rq+0x428/0x1080 [ 126.409224][ T5938] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 126.411393][ T5938] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 126.413576][ T5938] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 126.415590][ T5938] blk_mq_run_hw_queue+0x23c/0x670 [ 126.417612][ T5938] blk_mq_dispatch_list+0x51d/0x1360 [ 126.420012][ T5938] blk_mq_flush_plug_list+0x130/0x600 [ 126.422238][ T5938] __blk_flush_plug+0x2c4/0x4b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.424156][ T5938] __submit_bio+0x584/0x6c0 [ 126.426914][ T5938] submit_bio_noacct_nocheck+0x562/0xc10 [ 126.429592][ T5938] submit_bio_noacct+0xd17/0x2010 [ 126.432497][ T5938] submit_bh_wbc+0x59c/0x770 [ 126.435251][ T5938] block_read_full_folio+0x264/0x8e0 [ 126.437784][ T5938] filemap_read_folio+0xfc/0x3b0 [ 126.440139][ T5938] do_read_cache_folio+0x2d7/0x6b0 [ 126.442606][ T5938] read_part_sector+0xd1/0x370 [ 126.444884][ T5938] adfspart_check_ICS+0x93/0x910 [ 126.447244][ T5938] bdev_disk_changed+0x7f8/0xc80 [ 126.449748][ T5938] blkdev_get_whole+0x187/0x290 [ 126.452391][ T5938] bdev_open+0x2c7/0xe40 [ 126.454690][ T5938] blkdev_open+0x34e/0x4f0 [ 126.456607][ T5938] do_dentry_open+0x6d8/0x1660 [ 126.458720][ T5938] vfs_open+0x82/0x3f0 [ 126.460637][ T5938] path_openat+0x208c/0x31a0 [ 126.462865][ T5938] do_file_open+0x20e/0x430 [ 126.464948][ T5938] do_sys_openat2+0x10d/0x1e0 [ 126.467397][ T5938] __x64_sys_openat+0x12d/0x210 [ 126.470003][ T5938] do_syscall_64+0x106/0xf80 [ 126.472272][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.475295][ T5938] [ 126.475295][ T5938] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 126.478392][ T5938] __mutex_lock+0x1a2/0x1b90 [ 126.480750][ T5938] nbd_queue_rq+0xba/0x1080 [ 126.483236][ T5938] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 126.486236][ T5938] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 126.489198][ T5938] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 126.492012][ T5938] blk_mq_run_hw_queue+0x23c/0x670 [ 126.494381][ T5938] blk_mq_dispatch_list+0x51d/0x1360 [ 126.496862][ T5938] blk_mq_flush_plug_list+0x130/0x600 [ 126.499507][ T5938] __blk_flush_plug+0x2c4/0x4b0 [ 126.502038][ T5938] __submit_bio+0x584/0x6c0 [ 126.504440][ T5938] submit_bio_noacct_nocheck+0x562/0xc10 [ 126.507114][ T5938] submit_bio_noacct+0xd17/0x2010 [ 126.509496][ T5938] submit_bh_wbc+0x59c/0x770 [ 126.511934][ T5938] block_read_full_folio+0x264/0x8e0 [ 126.514880][ T5938] filemap_read_folio+0xfc/0x3b0 [ 126.517396][ T5938] do_read_cache_folio+0x2d7/0x6b0 [ 126.519807][ T5938] read_part_sector+0xd1/0x370 [ 126.522060][ T5938] adfspart_check_ICS+0x93/0x910 [ 126.524422][ T5938] bdev_disk_changed+0x7f8/0xc80 [ 126.526787][ T5938] blkdev_get_whole+0x187/0x290 [ 126.529366][ T5938] bdev_open+0x2c7/0xe40 [ 126.532220][ T5938] blkdev_open+0x34e/0x4f0 [ 126.534885][ T5938] do_dentry_open+0x6d8/0x1660 [ 126.537144][ T5938] vfs_open+0x82/0x3f0 [ 126.539153][ T5938] path_openat+0x208c/0x31a0 [ 126.541351][ T5938] do_file_open+0x20e/0x430 [ 126.543547][ T5938] do_sys_openat2+0x10d/0x1e0 [ 126.545782][ T5938] __x64_sys_openat+0x12d/0x210 [ 126.548139][ T5938] do_syscall_64+0x106/0xf80 [ 126.550338][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.553290][ T5938] [ 126.553290][ T5938] -> #4 (set->srcu){.+.+}-{0:0}: [ 126.556985][ T5938] __synchronize_srcu+0xa2/0x300 [ 126.559517][ T5938] blk_mq_quiesce_queue+0x149/0x1c0 [ 126.561945][ T5938] elevator_switch+0x17b/0x7e0 [ 126.564243][ T5938] elevator_change+0x352/0x530 [ 126.566521][ T5938] elevator_set_default+0x29e/0x360 [ 126.568980][ T5938] blk_register_queue+0x412/0x590 [ 126.571516][ T5938] __add_disk+0x73f/0xe40 [ 126.573777][ T5938] add_disk_fwnode+0x118/0x5c0 [ 126.576316][ T5938] nbd_dev_add+0x77a/0xb10 [ 126.578586][ T5938] nbd_init+0x291/0x2b0 [ 126.580632][ T5938] do_one_initcall+0x11d/0x760 [ 126.582999][ T5938] kernel_init_freeable+0x6e5/0x7a0 [ 126.585542][ T5938] kernel_init+0x1f/0x1e0 [ 126.587953][ T5938] ret_from_fork+0x754/0xd80 [ 126.590412][ T5938] ret_from_fork_asm+0x1a/0x30 [ 126.592727][ T5938] [ 126.592727][ T5938] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 126.596052][ T5938] __mutex_lock+0x1a2/0x1b90 [ 126.598371][ T5938] elevator_change+0x1bc/0x530 [ 126.600944][ T5938] elevator_set_none+0x92/0xf0 [ 126.603461][ T5938] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 126.606369][ T5938] nbd_start_device+0x1a6/0xbd0 [ 126.608768][ T5938] nbd_genl_connect+0xff2/0x1a40 [ 126.611340][ T5938] genl_family_rcv_msg_doit+0x214/0x300 [ 126.614259][ T5938] genl_rcv_msg+0x560/0x800 [ 126.616601][ T5938] netlink_rcv_skb+0x159/0x420 [ 126.618897][ T5938] genl_rcv+0x28/0x40 [ 126.621003][ T5938] netlink_unicast+0x5aa/0x870 [ 126.623604][ T5938] netlink_sendmsg+0x8b0/0xda0 [ 126.626083][ T5938] ____sys_sendmsg+0x9e1/0xb70 [ 126.628392][ T5938] ___sys_sendmsg+0x190/0x1e0 [ 126.630661][ T5938] __sys_sendmsg+0x170/0x220 [ 126.632942][ T5938] do_syscall_64+0x106/0xf80 [ 126.635310][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.638307][ T5938] [ 126.638307][ T5938] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 126.642138][ T5938] blk_alloc_queue+0x610/0x790 [ 126.644487][ T5938] blk_mq_alloc_queue+0x174/0x290 [ 126.646865][ T5938] __blk_mq_alloc_disk+0x29/0x120 [ 126.649338][ T5938] nbd_dev_add+0x492/0xb10 [ 126.651852][ T5938] nbd_init+0x291/0x2b0 [ 126.654357][ T5938] do_one_initcall+0x11d/0x760 [ 126.656633][ T5938] kernel_init_freeable+0x6e5/0x7a0 [ 126.659064][ T5938] kernel_init+0x1f/0x1e0 [ 126.661098][ T5938] ret_from_fork+0x754/0xd80 [ 126.663298][ T5938] ret_from_fork_asm+0x1a/0x30 [ 126.665549][ T5938] [ 126.665549][ T5938] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 126.668842][ T5938] fs_reclaim_acquire+0xc4/0x100 [ 126.671404][ T5938] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 126.674267][ T5938] __alloc_skb+0x140/0x710 [ 126.676405][ T5938] tcp_stream_alloc_skb+0x34/0x660 [ 126.678755][ T5938] tcp_sendmsg_locked+0x1396/0x45e0 [ 126.681224][ T5938] tcp_sendmsg+0x2e/0x50 [ 126.683432][ T5938] inet_sendmsg+0xb9/0x140 [ 126.685246][ T5938] sock_write_iter+0x4ea/0x5a0 [ 126.686981][ T5938] vfs_write+0x6ac/0x1070 [ 126.688541][ T5938] ksys_write+0x1f8/0x250 [ 126.690211][ T5938] do_syscall_64+0x106/0xf80 [ 126.691933][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.694115][ T5938] [ 126.694115][ T5938] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 126.696721][ T5938] __lock_acquire+0x14b8/0x2630 [ 126.698551][ T5938] lock_acquire+0x1cf/0x380 [ 126.700304][ T5938] lock_sock_nested+0x41/0xf0 [ 126.701983][ T5938] inet_shutdown+0x67/0x410 [ 126.703632][ T5938] nbd_mark_nsock_dead+0xae/0x5c0 [ 126.705425][ T5938] recv_work+0x5fb/0x8c0 [ 126.707062][ T5938] process_one_work+0xa23/0x19a0 [ 126.709084][ T5938] worker_thread+0x5ef/0xe50 [ 126.710917][ T5938] kthread+0x370/0x450 [ 126.712405][ T5938] ret_from_fork+0x754/0xd80 [ 126.714071][ T5938] ret_from_fork_asm+0x1a/0x30 [ 126.715791][ T5938] [ 126.715791][ T5938] other info that might help us debug this: [ 126.715791][ T5938] [ 126.719205][ T5938] Chain exists of: [ 126.719205][ T5938] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 126.719205][ T5938] [ 126.723539][ T5938] Possible unsafe locking scenario: [ 126.723539][ T5938] [ 126.725869][ T5938] CPU0 CPU1 [ 126.727565][ T5938] ---- ---- [ 126.729607][ T5938] lock(&nsock->tx_lock); [ 126.731750][ T5938] lock(&cmd->lock); [ 126.734664][ T5938] lock(&nsock->tx_lock); [ 126.737657][ T5938] lock(sk_lock-AF_INET); [ 126.739591][ T5938] [ 126.739591][ T5938] *** DEADLOCK *** [ 126.739591][ T5938] [ 126.743165][ T5938] 3 locks held by kworker/u33:3/5938: [ 126.745624][ T5938] #0: ffff888028cdb948 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 126.750050][ T5938] #1: ffffc90003b27d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 126.754715][ T5938] #2: ffff888064927470 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 126.758837][ T5938] [ 126.758837][ T5938] stack backtrace: [ 126.761492][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/u33:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.761518][ T5938] Tainted: [L]=SOFTLOCKUP [ 126.761525][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.761539][ T5938] Workqueue: nbd3-recv recv_work [ 126.761560][ T5938] Call Trace: [ 126.761568][ T5938] [ 126.761578][ T5938] dump_stack_lvl+0x100/0x190 [ 126.761609][ T5938] print_circular_bug.cold+0x178/0x1c7 [ 126.761638][ T5938] check_noncircular+0x146/0x160 [ 126.761670][ T5938] __lock_acquire+0x14b8/0x2630 [ 126.761689][ T5938] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 126.761716][ T5938] lock_acquire+0x1cf/0x380 [ 126.761731][ T5938] ? inet_shutdown+0x67/0x410 [ 126.761750][ T5938] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 126.761776][ T5938] lock_sock_nested+0x41/0xf0 [ 126.761801][ T5938] ? inet_shutdown+0x67/0x410 [ 126.761819][ T5938] inet_shutdown+0x67/0x410 [ 126.761837][ T5938] nbd_mark_nsock_dead+0xae/0x5c0 [ 126.761865][ T5938] recv_work+0x5fb/0x8c0 [ 126.761883][ T5938] ? __lock_acquire+0xd73/0x2630 [ 126.761901][ T5938] ? __pfx_recv_work+0x10/0x10 [ 126.761918][ T5938] ? debug_object_deactivate+0x2e4/0x3b0 [ 126.761951][ T5938] ? rcu_is_watching+0x12/0xc0 [ 126.761976][ T5938] process_one_work+0xa23/0x19a0 [ 126.762002][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 126.762024][ T5938] ? __pfx_recv_work+0x10/0x10 [ 126.762043][ T5938] worker_thread+0x5ef/0xe50 [ 126.762066][ T5938] ? kthread+0x13a/0x450 [ 126.762082][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 126.762122][ T5938] kthread+0x370/0x450 [ 126.762140][ T5938] ? __pfx_kthread+0x10/0x10 [ 126.762156][ T5938] ret_from_fork+0x754/0xd80 [ 126.762175][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 126.762192][ T5938] ? __switch_to+0x7b4/0x1120 [ 126.762215][ T5938] ? __pfx_kthread+0x10/0x10 [ 126.762232][ T5938] ret_from_fork_asm+0x1a/0x30 [ 126.762259][ T5938] [ 127.484511][ T8089] block nbd3: shutting down sockets [ 127.491960][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.568048][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.657958][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.748992][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.914201][ T13] bridge_slave_1: left allmulticast mode [ 127.916169][ T13] bridge_slave_1: left promiscuous mode [ 127.918290][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.923087][ T13] bridge_slave_0: left allmulticast mode [ 127.925168][ T13] bridge_slave_0: left promiscuous mode [ 127.927141][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.277527][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.282986][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.288198][ T13] bond0 (unregistering): Released all slaves [ 128.293222][ T13] bond1 (unregistering): Released all slaves [ 128.300397][ T13] bond2 (unregistering): Released all slaves [ 128.307075][ T13] bond3 (unregistering): Released all slaves [ 128.313712][ T13] bond4 (unregistering): Released all slaves [ 128.321198][ T13] bond5 (unregistering): Released all slaves [ 128.330874][ T13] bond6 (unregistering): Released all slaves [ 128.337855][ T13] bond7 (unregistering): Released all slaves [ 128.344392][ T13] bond8 (unregistering): Released all slaves [ 128.350508][ T13] bond9 (unregistering): Released all slaves [ 128.361437][ T13] bond10 (unregistering): Released all slaves [ 128.367987][ T13] bond11 (unregistering): Released all slaves [ 128.375521][ T13] bond12 (unregistering): Released all slaves [ 128.382329][ T13] bond13 (unregistering): Released all slaves [ 128.391256][ T13] bond14 (unregistering): Released all slaves [ 128.397606][ T13] bond15 (unregistering): Released all slaves [ 128.415235][ T13] bond16 (unregistering): Released all slaves [ 128.422028][ T13] bond17 (unregistering): Released all slaves [ 128.428685][ T13] bond18 (unregistering): Released all slaves [ 128.435184][ T13] bond19 (unregistering): Released all slaves [ 128.441019][ T13] bond20 (unregistering): Released all slaves [ 128.451136][ T13] bond21 (unregistering): Released all slaves [ 128.455793][ T13] bond22 (unregistering): Released all slaves [ 128.461686][ T13] bond23 (unregistering): Released all slaves [ 128.466197][ T13] bond24 (unregistering): Released all slaves [ 128.472443][ T13] bond25 (unregistering): Released all slaves [ 128.479154][ T13] bond26 (unregistering): Released all slaves [ 128.483795][ T13] bond27 (unregistering): Released all slaves [ 128.488563][ T13] bond28 (unregistering): Released all slaves [ 128.494608][ T13] bond29 (unregistering): Released all slaves [ 128.500387][ T13] bond30 (unregistering): Released all slaves [ 128.505405][ T13] bond31 (unregistering): Released all slaves [ 128.512377][ T13] bond32 (unregistering): Released all slaves [ 128.519053][ T13] bond33 (unregistering): Released all slaves [ 128.524148][ T13] bond34 (unregistering): Released all slaves [ 128.528361][ T13] bond35 (unregistering): Released all slaves [ 128.880797][ T13] hsr_slave_0: left promiscuous mode [ 128.883234][ T13] hsr_slave_1: left promiscuous mode [ 128.885838][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.888850][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.892575][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.895847][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.900543][ T13] veth1_macvtap: left allmulticast mode [ 128.902796][ T13] veth1_macvtap: left promiscuous mode [ 128.905148][ T13] veth0_macvtap: left promiscuous mode [ 128.907312][ T13] veth1_vlan: left promiscuous mode [ 128.909189][ T13] veth0_vlan: left promiscuous mode [ 128.971093][ T13] team0 (unregistering): Port device team_slave_1 removed [ 128.976655][ T13] team0 (unregistering): Port device team_slave_0 removed [ 129.468400][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.549820][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.618474][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.688722][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.801916][ T13] bridge_slave_1: left allmulticast mode [ 129.804515][ T13] bridge_slave_1: left promiscuous mode [ 129.807027][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.811608][ T13] bridge_slave_0: left allmulticast mode [ 129.815239][ T13] bridge_slave_0: left promiscuous mode [ 129.817737][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.932743][ T13] bond1 (unregistering): (slave .`): Releasing active interface [ 129.938935][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.943291][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.946759][ T13] .` (unregistering): Released all slaves [ 129.951391][ T13] bond1 (unregistering): Released all slaves [ 130.293816][ T13] hsr_slave_0: left promiscuous mode [ 130.297023][ T13] hsr_slave_1: left promiscuous mode [ 130.300452][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.303673][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.309965][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.313188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.319012][ T13] veth1_macvtap: left promiscuous mode [ 130.321632][ T13] veth0_macvtap: left promiscuous mode [ 130.325345][ T13] veth0_vlan: left promiscuous mode [ 130.388557][ T13] team0 (unregistering): Port device team_slave_1 removed [ 130.394180][ T13] team0 (unregistering): Port device team_slave_0 removed